> Markdown version of [/jobs/ext/3863478-senior-grc-information-security-compliance-analyst](https://www.wearedevelopers.com/jobs/ext/3863478-senior-grc-information-security-compliance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior GRC/Information Security Compliance Analyst

- **Company:** Hook LLC
- **Location:** Jersey City, NJ, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Continuous Integration, Multi-Factor Authentication, Identity and Access Management, Information Technology Audit, Network Security, Systems Development Life Cycle, Anti-Phishing, RSA (Cryptosystem), Google Cloud, IT General Controls (ITGC), Oracle Cloud Infrastructure, Devsecops
- **Published:** October 22, 2026
- **Apply:** https://www.careerboard.com/us/en/find-jobs-in-United-States/-80A84DB5C8658F5673/

## About the Role

Our client is seeking an experienced Governance, Risk & Compliance (GRC) professional with 5-8 years of experience to support information security, compliance, risk management, and reporting initiatives. This role will help strengthen the organization's security and compliance programs while working across teams to promote a security-first culture., * 5-8 years of experience in GRC, information security, IT audit, compliance, or a related field.

 * Strong knowledge of at least two U.S. privacy, cybersecurity, or federal regulatory requirements, such as FTC regulations, CCPA/CPRA, COPPA, CIRCIA, or NIST frameworks.
 * Expertise in at least four areas including ISO 27001, ISO 42001, SOC, SOX, COSO/COBIT, privacy regulations, ITGC/ITAC controls, risk assessments, or internal audit.
 * Strong written and verbal communication skills.
 * Ability to work cross-functionally and manage multiple priorities.
 * Working knowledge of IT infrastructure, cloud security, IAM/IGA, MFA, network security, SDLC, DevSecOps, and CI/CD is a plus.
 * Experience with tools such as RSA Archer, Microsoft 365, AWS, Azure, GCP, or OCI is preferred.

## Description

* Support implementation of policies, standards, and procedures aligned with ISO 27001, ISO 42001, NIST, GDPR, GLBA, CCPA, and other applicable regulations.
 * Conduct risk, vulnerability, and gap assessments and help identify and remediate compliance gaps.
 * Perform SOX, SOC 1/SOC 2, ITGC/ITAC, internal audit, and privacy control testing.
 * Assess control effectiveness and support compliance with applicable U.S. federal and privacy regulations.
 * Partner with cross-functional teams to manage compliance requirements and drive security improvements.
 * Develop reports, dashboards, and presentations for senior leadership.
 * Support security awareness programs, including training, phishing simulations, and e-learning.
 * Track training effectiveness and recommend continuous improvements.