> Markdown version of [/jobs/ext/1478263-grc-analyst-hybrid-az](https://www.wearedevelopers.com/jobs/ext/1478263-grc-analyst-hybrid-az). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - Hybrid AZ - **Company:** Best Western International, Inc. - **Location:** Sacate, AZ, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Disaster Recovery, Information Management, PCI Data Security Standards, Microsoft PowerPoint, Software Vulnerability Management, IT General Controls (ITGC), Software Security, RSA Archer Platform - **Published:** July 29, 2026 - **Apply:** https://bestwestern.wd1.myworkdayjobs.com/careers/job/Remote-AZ/GRC-Analyst---Hybrid-AZ_R5143/apply ## About the Role * Bachelor's or Master's degree in a computer or information management field or related experience preferred. * CISSP, CISA, CISM, CRISC, or equivalent security, audit, risk, or compliance certification preferred. * 3-5 years' experience in an information security compliance, audit, governance, or risk management role with hands-on experience in compliance initiatives including, but not limited to: + PCI DSS v4.0.1 + Software security, secure software lifecycle, or application security compliance requirements where applicable + SOX-404 and IT General Controls + EU-GDPR, CCPA, and related privacy or data protection requirements * Strong analytical and problem-solving skills with the ability to interpret control requirements, identify risk, and function as a change agent. * Intermediate to advanced expertise in Excel, PowerPoint, reporting, documentation, evidence tracking, and use of systems or repositories used to manage audit and compliance artifacts. * Demonstrated experience working within a team in a fast-paced environment with competing audit, compliance, and operational priorities. * Understanding of security metrics, compliance reporting, evidence tracking, and dashboard creation for management review and control-owner visibility. * Demonstrated ability to create, maintain, and present security awareness, compliance, or control-owner training content a plus. ## Description Ensures the confidentiality, integrity, and availability of Company data and information technology assets by supporting governance, risk, and compliance activities, including security policy and standards management, risk management, disaster recovery coordination, audit readiness, and regulatory compliance. This role supports PCI DSS, SOX, privacy, and broader cybersecurity compliance activities across the organization., * The ideal candidate will be able to build rapport and credibility with internal stakeholders, business partners, member hotel representatives, and technology teams to support effective governance, risk, and compliance outcomes. Excellent communication and interpersonal skills are required to coordinate evidence requests, explain control expectations, and drive timely follow-through. * Demonstrated experience supporting compliance frameworks and control environments such as PCI DSS v4.0.1, NIST, COBIT, ISO 27001, SOX, privacy regulations, and related cybersecurity standards. * Coordinate with internal stakeholders and external auditors to maintain current documentation for control scoping, evidence collection, testing support, remediation tracking, and validation of IT and cybersecurity controls. * Work with stakeholders to fulfill evidence requests within committed timelines and ensure evidence is complete, accurate, and mapped to applicable control requirements. * Conduct recurring control reviews with stakeholders to identify gaps, track remediation progress, and provide actionable advisement to management. * Review audit findings, control gaps, and compliance risks; partner with control owners to document remediation plans, track progress, and escalate delays or blockers as appropriate. * General understanding of Sarbanes-Oxley (SOX) compliance requirements, IT General Controls, and audit evidence expectations. * Thorough knowledge of PCI-related standards and guidance, including PCI DSS v4.0.1, ASV requirements, payment security documentation, and software security requirements where applicable. * Thorough understanding of applicable privacy and data protection requirements, including GDPR, the California Consumer Privacy Act (CCPA), and related organizational privacy obligations. * Familiarity with a broad range of IT and information security products and technologies such as GRC platforms, central logging systems, file integrity monitoring, vulnerability management, endpoint security, and cloud security tools. * Excellent documentation, communication, organization, and follow-through skills, with the ability to coordinate multiple evidence, audit, and remediation activities at the same time. ## Related Videos - [In-depth .NET Azure Functions: Isolated mode, performance and durable AI agents](https://www.wearedevelopers.com/videos/100207-in-depth-net-azure-functions-isolated-mode-performance-and-durable-ai-agents) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Convincing Product teams to Adopt Gitops in a Large Org](https://www.wearedevelopers.com/videos/1936-convincing-product-teams-to-adopt-gitops-in-a-large-org) - [Why Your Next Best Talent Might Not Be in Your Neighborhood](https://www.wearedevelopers.com/videos/1861-why-your-next-best-talent-might-not-be-in-your-neighborhood) - [System Resilience: Surviving the Software Storm](https://www.wearedevelopers.com/videos/874-system-resilience-surviving-the-software-storm) - [From Syntax to Singularity: AI’s Impact on Developer Roles](https://www.wearedevelopers.com/videos/900-from-syntax-to-singularity-ai-s-impact-on-developer-roles) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Paying Remote Jobs](https://www.wearedevelopers.com/magazine/255-best-paying-remote-jobs) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)