> Markdown version of [/jobs/ext/2728038-grc-analyst](https://www.wearedevelopers.com/jobs/ext/2728038-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** Allied Benefit Systems, LLC - **Location:** Oklahoma City, OK, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, Data Retention, Data Security, Information Sciences, Information Technology, RSA Archer Platform - **Published:** September 5, 2026 - **Apply:** https://www.careerbuilder.com/job-details/grc-analyst-oklahoma-city-ok--f36539b3-7029-4a69-8438-3f3e5ccd1c32 ## About the Role * B.S. or equivalent in Computer Science, Information Science and Technology, or related field or equivalent work experience required * Security certifications highly desired EXPERIENCE AND SKILLS * At least three years' experience in Governance, Risk, and Compliance work required * Experience working in a highly regulated environment * Experience in HIPAA, HITECH, and SOC 2 compliance environments * Experience working with GRC platforms, such as Drata * Familiarity with NIST SP 800 series, ISO/IEC 27000 series, and similar frameworks * Excellent oral, written, and interpersonal skills with the ability to influence and work effectively with diverse groups of peers and business partners * Detail oriented with a demonstrated ability to work on multiple tasks simultaneously with strong organizational and prioritization skills POSITION COMPETENCIES * Accountability * Analytical Thinking * Collaboration * Communication * Customer Focus * Functional Expertise * Initiative PHYSICAL DEMANDS * This is a standard desk role requiring extended sitting and computer work, Analysis Skills, Computer Science, Cross-Functional, Customer Relations, Detail Oriented, Documentation, Due Diligence, Environmental Compliance, Establish Priorities, External Audit, HIPAA (Health Insurance Portability and Accountability Act), ISO (International Organization for Standardization), Information Science, Information Technology & Information Systems, Information/Data Security (InfoSec), Internal Audit, International Electro-Technical Commission (IEC), Interpersonal Skills, Maintain Compliance, Multitasking, Organizational Skills, Presentation/Verbal Skills, Regulatory Compliance, Regulatory Reports, Regulatory Requirements, Risk, Risk Analysis, Risk Management, Team Player, Time Management, U.S. National Institute of Standards and Technology (NIST), Writing Skills ## Description The GRC Analyst provides support for the development, implementation, and maintenance of security controls, working cross-functionally to ensure regulatory compliance requirements are met, managing risk, and maintaining a strong security posture., * Assist in the development, update, review, and maintenance of security and compliance policies, standards, guidelines, and procedures * Support internal and external audits (e.g. SOC 2, HIPAA) * Track and maintain alignment of controls with industry frameworks (e.g. SOC 2, HIPAA, NIST CSF) using Drata * Optimize Drata environment, automating controls and reporting * Assist with regulatory reporting and compliance documentation * Conduct vendor risk assessments and due diligence reviews * Monitor third-party compliance with regulatory obligations * Track remediation efforts and ensure timely closure of findings * Conduct risk assessments and support risk mitigation planning * Maintain risk register and support risk tracking and reporting * Monitor user adherence to acceptable use, least privilege access, and data retention and security policies * Promote company culture of security and compliance awareness * Other duties as assigned, The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate., Allied reserves the right to amend, change, alter, and revise, pay ranges and benefits offerings at any time. All applicants acknowledge that by applying to the position you understand that the specific pay range is contingent upon meeting the qualification and requirements of the role, and for the successful completion of the interview selection and process. It is at the Companys discretion to determine what pay is provided to a candidate within the range associated with the role. ## Related Videos - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Architecting the Future: Leveraging AI, Cloud, and Data for Business Success](https://www.wearedevelopers.com/videos/1096-architecting-the-future-leveraging-ai-cloud-and-data-for-business-success) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Prompt Injection, Poisoning & More: The Dark Side of LLMs](https://www.wearedevelopers.com/videos/1563-prompt-injection-poisoning-more-the-dark-side-of-llms) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)