> Markdown version of [/jobs/ext/3688753-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3688753-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst

- **Company:** American Tower Corporation
- **Location:** Boston, MA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Data Analysis, Cyber Security, Identity and Access Management, Microsoft Office, Oracle (Applications)
- **Published:** October 11, 2026
- **Apply:** https://www.juju.com/job/1_ScrapingHub15222-2851

## About the Role

The incumbent assists in the oversight and maintenance of policy and standards. **What You Need to Succeed** + Bachelor's degree in Information Security, Cybersecurity, Risk Management, or equivalent work experience preferred. + Minimum 2 years of experience in Governance, Risk, and Compliance (GRC) or Information Security required. + Experience conducting requirements gathering sessions and documentation, including data analysis preferred. + Experience developing, documenting and maintaining access and security policies, processes, procedures, and standards preferred. + Strong organization, planning, and project management skills; ability to prioritize tasks for self and team to meet requirements and deadlines. + Ability to work with different functional groups and levels of employees to effectively and professionally achieve results. + Excellent written and verbal communication skills and ability to interact well with internal and external parties + Ability to work individually
and in team settings with cross-functional teams + Strong computer skills, including Microsoft Office suite and Oracle. + Knowledge of access, security, and risk assessment methods and technologies + Knowledge of Information Security Standards (ISO 27001/27002, ITIL, etc.) + Knowledge of Data Privacy and Compliance Regulations (MA CMR 201, HIPPA, Red Flag, etc.) **What You Can Offer Us** + Act as a liaison between IT and business units to support the development and implementation of governance policies, standards, frameworks, and tools that align with organizational objectives. + Supports requirements gathering and documentation for InfoSec projects and programs, including proactively setting up and leading meetings to work through unclear requirements, workflows, and drive toward identification of solutions. + Manages GRC ticket maintenance and provides guidance to stakeholders on GRC topics. + Monitor and maintain risk remediation activities, ensuring compliance issues are

## Description

**The Team** The Analyst Governance, Risk, and Compliance, a member of the Information Security - Governance, Risk and Compliance (GRC) team, focuses on implementing and maintaining governance frameworks, managing risk remediation activities, and ensuring adherence to regulatory and internal security standards.
The incumbent oversees requirements gathering and documentation for the Identity and Access Management (IAM) implementation.
The incumbent administers GRC related inquiries from cross-functional business teams.