> Markdown version of [/jobs/ext/1569386-grc-analyst](https://www.wearedevelopers.com/jobs/ext/1569386-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** Insight Global - **Location:** San Jose, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Identity and Access Management, Information Technology Audit, RSA Archer Platform, Hardware Infrastructure, CIS Benchmarks - **Published:** July 7, 2026 - **Apply:** https://dejobs.org/x/x/86B61F93709E408994860ADC581C93E1/job/ ## About the Role * 5-8+ years of experience in Information Security, Technology Risk, IT Audit, Governance, Risk & Compliance (GRC), or a related field. * Experience conducting risk assessments and control gap analyses within enterprise technology environments. * Strong understanding of security controls, technology governance, and risk management principles. * Experience supporting both cloud and on-premises infrastructure environments. * Ability to assess technology exceptions, standards deviations, and compensating controls. * Experience working cross-functionally with engineering, security, infrastructure, and business teams. * Strong written and verbal communication skills with the ability to articulate technical risks to non-technical audiences. - Experience managing technology exception, risk acceptance, or waiver processes within a large enterprise. * Familiarity with common security and control frameworks such as NIST, ISO 27001, CIS Controls, or COBIT. * Experience using GRC platforms for risk tracking and governance workflows. * Background in regulated industries such as financial services, fintech, healthcare, or technology. * Understanding of identity and access management, authentication controls, infrastructure security, and security governance practices. ## Description Insight Global is seeking a Technology Risk Governance Analyst to support a Fortune 100 fintech organization. This individual will evaluate technology exception requests, standards deviations, and risk acceptance activities across cloud and on-premises environments. The ideal candidate has experience within GRC, technology risk, or information security and can effectively assess control gaps, compensating controls, and overall risk exposure., * Review, assess, and manage technology exception and risk acceptance requests. * Analyze control gaps and evaluate associated risk, impact, and mitigating controls. * Partner with engineering, security, and business stakeholders to collect supporting information and facilitate reviews. * Track exception requests through approval, renewal, and closure processes. * Maintain risk documentation, exception inventories, and governance records. * Prepare reporting and trend analysis on exception activity, recurring risks, and control deficiencies. * Ensure governance requirements, standards, and risk records remain accurate and up to date. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/. ## Related Videos - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)