> Markdown version of [/jobs/ext/264044-grc-analyst-ii](https://www.wearedevelopers.com/jobs/ext/264044-grc-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst II

- **Company:** Frontgrade Technologies
- **Location:** Colorado Springs, CO, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Information Technology Audit, SC Clearance
- **Published:** May 14, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=41a341f5754f7267

## About the Role

Do you have experience in Regulatory compliance?, Do you have a Master's degree?, * Bachelor's Degree

 * Minimum two (2) years of experience in cybersecurity, technology risk, compliance, audit related roles. OR (6) years of experience may be considered in lieu of a Bachelors Degree. OR No experience required in lieu of Masters Degree.
 * Experience supporting IT audits, risk assessments, or compliance assessments
 * Working knowledge of CMMC controls, NIST 800-171 requirements, and compliance processes
 * Hands-on experience developing and maintaining POA&Ms
 * Ability to follow defined processes while managing multiple compliance-related tasks
 * Ability to travel up to 10%
 * Active Secret clearance or the ability to obtain and maintain

Preferred:

 * Experience performing NIST-based security or technology risk assessments
 * Industry certifications such as CISA, CRISC, Security+, or similar credentials
 * Strong written and verbal communication skills, particularly for documentation and audit response
 * Detail-oriented with strong analytical and organizational skills

## Description

The Governance, Risk, and Compliance (GRC) Analyst II configures, implements, and manages security devices through strategic and technical security mitigation planning. This involves daily threat analysis and incident management.

 * Provide strategic and technical security mitigation planning and participate in the design, development, and maintenance of GRC activities aligned with NIST 800-171
 * Document and maintain GRC artifacts including process documentation, risk registers, and control mappings
 * Develop, maintain, and track Plans of Actions and Milestones (POA&Ms), including remediation status and supporting evidence
 * Participate in stakeholders interviews, working sessions, and documentation reviews to support GRC assessments
 * Provide technical expertise in the development, maintenance, and enhancement of corporate security operating procedures, standards and best practices
 * Assist with preparation for internal and external audits, assessments, and regulatory reviews, including evidence collection and response coordination


## Related Videos

- [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible)
- [Fireside Chat: AI and Sustainability - Thorsten Jonas](https://www.wearedevelopers.com/videos/1769-fireside-chat-ai-and-sustainability-thorsten-jonas)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Making Interactions Accessible to All Users](https://www.wearedevelopers.com/videos/649-making-interactions-accessible-to-all-users)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Data Privacy in LLMs: Challenges and Best Practices](https://www.wearedevelopers.com/videos/1218-data-privacy-in-llms-challenges-and-best-practices)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Quick guide: How to write a Software Developer CV](https://www.wearedevelopers.com/magazine/37-quick-guide-how-to-write-a-software-developer-cv)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)