> Markdown version of [/jobs/ext/2680564-grc-analyst](https://www.wearedevelopers.com/jobs/ext/2680564-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** Insight Global - **Location:** Carol Stream, IL, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Information Technology Audit, PCI Data Security Standards, Google Cloud, Cloud Platform System, Cyber Threat Analysis, Servicenow - **Published:** September 2, 2026 - **Apply:** https://dejobs.org/x/x/11A2F64D4B1F4636B33CB8A008E99B07/job/ ## About the Role 3+ years of experience in cybersecurity GRC, IT audit, information security, or compliance. Hands-on experience managing risk registers and the full cyber risk management lifecycle. Experience supporting audits/certifications across at least two frameworks such as NIST CSF, HITRUST, HIPAA, PCI DSS, or SOC 2. Strong knowledge of NIST CSF, HITRUST, HIPAA, and PCI DSS 4.0. Experience reviewing cybersecurity and data protection language in contracts, BAAs, and DPAs. Experience with a GRC platform (ServiceNow GRC, Archer, OneTrust, LogicGate, AuditBoard, etc.). Strong communication skills with the ability to translate technical risks for executive and business audiences. Ability to manage multiple priorities and collaborate across Legal, Compliance, IT, Engineering, Product, Audit, and Leadership teams. Industry certifications such as CISSP, CISA, CISM, CRISC, CIPP, HCISPP, HITRUST CCSFP, or PCI ISA. Experience in healthcare, financial services, or other regulated industries. Hands-on experience supporting HITRUST r2 certifications and/or PCI DSS 4.0 attestations. Knowledge of GDPR, CCPA/CPRA, and other privacy regulations. Familiarity with cloud environments (AWS, Azure, GCP) and SaaS security models. Experience supporting organizations undergoing rapid growth, M&A activity, or technology modernization initiatives. Experience with executive-level risk reporting and board presentations. ## Description Own the day-to-day execution of the cybersecurity Governance, Risk, and Compliance program, including cyber risk assessments, enterprise risk reporting, risk register management, and board-level risk dashboards. Lead policy and standards management, ensuring alignment with frameworks such as NIST, HITRUST, HIPAA, and PCI DSS. Partner with Compliance, Internal Audit, Legal, IT, Engineering, and Product teams to identify, assess, mitigate, and track cybersecurity risks. Support audits and certifications, manage client security questionnaires, review security-related contract language, facilitate risk governance meetings, and provide leadership with clear insights into cybersecurity risk and compliance posture. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)