> Markdown version of [/jobs/ext/1481443-grc-analyst](https://www.wearedevelopers.com/jobs/ext/1481443-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst

- **Company:** Hayward Industries, Inc.
- **Location:** Clemmons, NC, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Data Integrity, Data Security, Identity and Access Management, IT General Controls (ITGC)
- **Published:** July 29, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e74559b963519dac

## About the Role

* Bachelor's degree in Accounting, Information Systems, Cybersecurity, or related field.

 * 3-6 years of SOX-focused GRC or audit experience.

 * Hands-on experience managing Varonis in SOX environments.

 * Strong understanding of ITGCs, ICFR, and audit evidence standards.

## Description

The GRC Analyst - SOX & Data Security Focus plays a critical role in ensuring the effectiveness of internal controls over financial reporting (ICFR) and protecting sensitive financial and regulated data. This role supports Sarbanes-Oxley (SOX) compliance, audit readiness, and risk management by partnering with Finance, IT, Internal and External auditors. The analyst administers Varonis to classify, monitor, and protect critical and sensitive data, ensuring evidence quality, least-privilege access, and reduced operational risk., SOX Compliance & Internal Controls

 * Support the design, documentation, and operation of IT General Controls (ITGCs).

 * Execute and evidence SOX controls related to logical access and data integrity.

 * Perform control testing, track deficiencies, and manage remediation.

 * Serve as liaison with Internal Audit and external auditors.

 * Other duties as assigned in support of the GRC function.

Data Security, Classification & Varonis Administration

 * Administer Varonis to classify and protect critical and sensitive data.

 * Monitor access and detect excessive privileges and control violations.

 * Produce audit-ready evidence and reports from Varonis.

Identity & Access Management (SOX-Aligned)

 * Perform SOX user access reviews for financial systems.

 * Validate provisioning, modification, and termination controls.


## Related Videos

- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Exploring 5 Key Applications of AI Abundance with Blockchain Assurance](https://www.wearedevelopers.com/videos/971-exploring-5-key-applications-of-ai-abundance-with-blockchain-assurance)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Glassdoor Dilemma: Unveiling the Truth Behind Company Reviews](https://www.wearedevelopers.com/magazine/273-the-glassdoor-dilemma-unveiling-the-truth-behind-company-reviews)