> Markdown version of [/jobs/ext/4002658-grc-analyst](https://www.wearedevelopers.com/jobs/ext/4002658-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** Reltio, Inc. - **Location:** United States (Remote available) - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Microsoft Access, Artificial Intelligence, Confluence, JIRA, Software as a Service, Cyber Security, Information Systems, Digital Assets, Issue Tracking Systems, SAP ERP, SAP (Applications), Unstructured Data, Enterprise Software Applications, Agentic-AI, Documentation System, Virtual Agents, Servicenow - **Published:** October 29, 2026 - **Apply:** https://www.builtincolorado.com/job/grc-analyst/11948323?handler=ApplyRedirect ## About the Role * Bachelor's degree in information systems, cybersecurity, business, accounting, or a related field, or equivalent practical experience. * At least two years of relevant experience in governance, risk, and compliance; information security; privacy; audit; or third-party risk management. * Experience preparing customer security or compliance questionnaire responses and reviewing vendor security and privacy documentation. * Working knowledge of common security and compliance frameworks and familiarity with GDPR concepts and privacy request workflows. * Experience working in or supporting a cloud, enterprise software, or Software-as-a-Service (SaaS) environment, with an understanding of shared security responsibilities. * Strong written and verbal communication skills, including the ability to translate technical information into clear, accurate responses for customers and internal stakeholders. * Strong attention to detail, sound judgment, and the ability to manage multiple requests, meet deadlines, and follow through on outstanding items. * Ability to collaborate across Security, Legal, Privacy, Product, Engineering, Sales, Procurement, and other business functions. * Proficiency with documentation tools, and ticketing or workflow systems, along with the ability to learn new tools and internal processes. Skills That Are Nice to Have * Prior experience within SAP or familiarity with SAP's internal privacy, vendor management, policy management, and compliance processes. * Familiarity with Master Data Management (MDM) platforms and the security and privacy considerations associated with managing enterprise data. * Experience with trust centers, questionnaire management tools, Jira, ServiceNow, or Confluence. * Experience supporting audits or assessments involving SOC 1, SOC 2, ISO 27001, HITRUST CSF, or privacy frameworks. * Familiarity with AI governance, AI risk assessments, or customer AI questionnaires. * Relevant certifications, such as CISA, CRISC, Security+, CIPP, CIPM, or equivalent credentials. ## Description The GRC Analyst manages customer security and compliance questionnaires, vendor risk assessments, GDPR requests, audit evidence, policy reviews, risk registers, compliance monitoring, and issue tracking. The role coordinates with Security, Legal, Privacy, Engineering, Sales, Procurement, and other stakeholders; maintains governance documentation and vendor records; supports audits and assessments; and translates technical and regulatory requirements into clear responses. The analyst also helps administer GRC tools and improve governance processes., * Prepare accurate, timely responses to customer security, privacy, compliance, and AI governance questionnaires and inquiries. Coordinate with internal subject matter experts to validate responses and gather supporting documentation. * Maintain reusable questionnaire responses and customer-facing compliance materials to improve consistency, accuracy, and turnaround time. * Respond to ad-hoc customer requests for audit reports, certifications, policies, and control evidence. Escalate complex or high-risk inquiries appropriately and track trends to identify gaps in documentation or controls. * Execute third-party risk assessments across the vendor lifecycle (intake, due diligence, onboarding, periodic review, offboarding). Maintain the vendor inventory and risk tiering. * Support vendor risk management by conducting security and privacy assessments, reviewing vendor documentation, identifying potential risks, and tracking remediation activities with business owners. * Maintain vendor assessment records and coordinate initial reviews, periodic reassessments, and follow-up activities in accordance with applicable policies and procedures. * Support GDPR-related requests by gathering relevant information, maintaining request records, tracking deadlines, and coordinating responses with Legal, Privacy, and other stakeholders. * Develop and maintain working knowledge of SAP's internal privacy, vendor management, policy management, and related governance processes. Help the GRC team navigate applicable requirements, identify process owners, and coordinate required submissions and approvals. * Support additional GRC activities based on team priorities, including audit preparation, evidence collection, policy reviews, risk assessments, compliance training, access reviews, and issue tracking. * Maintain organized, accurate documentation; communicate progress and blockers; and identify opportunities to simplify and improve GRC processes. * Communicate clearly and professionally with customers, vendors, and internal stakeholders at all levels, translating technical and regulatory requirements into plain, accurate language. * Support the team where needed, including but not limited to: risk register maintenance, compliance monitoring, security awareness and training tracking, issue management, and GRC tooling administration.