> Markdown version of [/jobs/ext/3364113-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3364113-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst

- **Company:** Parallels Inc.
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $120,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Issue Tracking Systems, Information Technology Audit, Information Technology, RSA Archer Platform
- **Published:** September 28, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=346bcec7098c670d

## About the Role

* Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
 * 4+ years of experience in GRC, IT audit, information security, or a related compliance role
 * Working knowledge of SOC 2, ISO 27001, and DORA (Digital Operational Resilience Act) requirements
 * Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems
 * Excellent written communication skills for policy drafting and compliance reporting
 * Ability to work independently and manage multiple concurrent reviews and deadlines

## Description

* Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership.
 * Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence.
 * Support the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation.
 * Maintain and update the organization's risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status.
 * Assist in the development, review, and implementation of GRC policies and procedures. Help ensure policies stay current with regulatory changes and organizational needs, and support employee awareness of policy requirements.
 * Leads audits and assessments against SOC 2, ISO 27001, and DORA requirements. Assist in evidence collection, control testing, and remediation tracking for audit findings., * Parallels features award-winning solutions that have helped millions of users for 40 years (can you believe it?!).
 * We have millions of users and decades of innovation under our belts.
 * We offer a fully remote workspace. There is no pressure to work in an office whatsoever.
 * Hours are flexible, too! You've worked hard to build your life, and we don't want you to give it up for work.
 * Our team is growing fast, and there's a ton of energy and a lot of really smart, motivated, fun people ready to welcome you in.


## Related Videos

- [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Recruiting in 2025: Will AI Help or Take Over?](https://www.wearedevelopers.com/videos/1301-recruiting-in-2025-will-ai-help-or-take-over)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)
- [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Glassdoor Dilemma: Unveiling the Truth Behind Company Reviews](https://www.wearedevelopers.com/magazine/273-the-glassdoor-dilemma-unveiling-the-truth-behind-company-reviews)