> Markdown version of [/jobs/ext/137134-it-grc-analyst](https://www.wearedevelopers.com/jobs/ext/137134-it-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT GRC Analyst - **Company:** State Farm Insurance - **Location:** Bloomington, IL, United States (Remote available) - **Experience:** Experienced - **Salary:** $104,000.0 - $165,000.0 - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Amazon Web Services, Antivirus Softwares, Software System Penetration Testing, Microsoft Azure, Cloud Computing, CompTIA Security+, Cyber Security, Data Security, Identity and Access Management, Key Management, Microsoft Software, Network Segmentation, PCI Data Security Standards, Systems Development Life Cycle, Simple Object Access Protocol (SOAP), Tokenization, Software Vulnerability Management, Data Logging, Malware, Operating System Security, Servicenow - **Published:** May 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=051dba500b65a017 ## About the Role Do you have experience in UI?, * 2 to 5 years hands-on ServiceNow experience as a developer, implementation specialist and/or GRC technical analyst/architect, specifically with the GRC related modules within ServiceNow. Additional technical Skills to include JavaScript, HTML/CSS, REST/SOAP integrations, ServiceNow UI Actions. * 5 to 8 years of technology and/or information security background and/or governance, risk & compliance. * Intermediate knowledge of five or more of the following areas: infrastructure (physical, virtual & Cloud), network segmentation, operating system security, encryption and key management, tokenization, anti-virus and malware, secure system development, identity and access management, vulnerability management, physical access controls, penetration testing, file integrity monitoring, logging, risk assessments/reviews and information security policy. * Ability to analyze, collaborate & present solutions (both verbal & written) to successfully remediate identified compliance issues with business partner, stakeholders and third party service providers. * Intermediate knowledge of PCI DSS compliance & security frameworks to understand & validate the requirements of protecting customer's payment card data. * Work well under pressure to identify and problem-solve complex situations across multiple customer channels and scenarios related to customer cardholder data and applicable PCI DSS Compliance., * Past or current certifications in one or more of the following areas: Security+, CISSP, GSEC, AWS, Azure, Microsoft, CISA, CISM, PCI ISA or PCI QSA. * Proven experience as a motivated, self-starter, who can deliver results in a fast paced, complex, changing environment. * Must be a strong communicator, a team & individual contributor, who has preferably worked on a team across multiple time zones. ## Description The IT GRC Analyst will work on a team of certified Payment Card Industry Internal Security Assessors (PCI ISA) on State Farm's ET-PCI Compliance and Consulting (PCI C&C) Team. This job role is responsible for assessing, validating, and delivering the Payment Card Industry Data Security Standard (PCI DSS) compliance for State Farm's PCI in-scope people, processes and technologies. Key Responsibilities Performed by the PCI ISA on a Daily Basis: * Applies defined PCI DSS scoping criteria. * PCI ISA collects and reviews evidence of compliance to validate PCI DSS requirements are met. * Supports the completion of assigned tasks for the annual PCI DSS Report on Compliance. * Drives necessary system and process updates in alignment with PCI DSS scoping & requirements. * Facilitates interaction between the business partner(s), product teams and the PCI C&C Team. * Consults on new and complex PCI DSS compliance considerations. * Works closely with business and technology teams to develop strong liaison relationships. * Stays current with new and evolving security, technologies, governance, risk & compliance topics via formal training and self-directed education. * Shares knowledge and experiences with others to help grow the team's talent bench through training and mentoring on a continual basis. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)