> Markdown version of [/jobs/ext/4482676-grc-analyst](https://www.wearedevelopers.com/jobs/ext/4482676-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst

- **Company:** eQuest Solutions
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Artificial Intelligence, Information Security Management, RSA (Cryptosystem), National Institute of Standards and Technology Cybersecurity Framework, RSA Archer Platform
- **Published:** October 18, 2026
- **Apply:** https://www.dice.com/job-detail/a15e0e96-90a8-496b-b34c-923af1f5e749

## About the Role

* Must Have: Hands-on experience performing full lifecycle, end-to-end compliance audits and certification management across ISO 27001, SOC 2 Type II, Data Privacy and internal control frameworks (J-SOX).
 * Must Have: Experience executing third-party vendor security risk assessments and managing supplier risk workflows in accordance with ISO, NIST, etc.
 * Strong working knowledge of core security frameworks and data protection standards (ISO 27001, NIST CSF, GDPR, HIPAA).
 * Excellent analytical and communication skills for leading audit interviews, evaluating security controls, standards, procedures and processes, and presenting findings to cross-functional stakeholders and executive management
 * Pluses (NOT MANDATORY):

 * Experience utilizing enterprise GRC platforms (e.g., BitSight, OneTrust, RSA Archer, Drata) for audit mapping and vendor tracking.
 * Professional certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor.
 * Exposure to specialized or emerging governance frameworks such as FDA, ISO 13485, ISO 14971, IEC 81001-5-1, 510 (k), PMA s or AI governance frameworks (ISO/IEC 42001, NIST AI RMF) or execution of MDS2 s.
 * Experience in International or Global environments

## Description

The GRC Analyst joins the Global Information Security Office to execute international enterprise governance, risk management, and compliance programs. Reporting to the GRC Manager, this role is directly responsible for executing full lifecycle, end-to-end compliance audits and certification programs, conducting third-party vendor risk evaluations, and maintaining global security policies across international enterprise IT and compliance frameworks., * Full Lifecycle Audits, Certifications & Regulatory Compliance: Performing end-to-end security and compliance audits and maintain adherence to security certifications, from initial audit planning/updating, scoping, evidence collection, interviewing control and process owners and tracking final remediation actions to closure. Audits and Compliance are related to: ISO 27001, NIST, SOC 2 Type II, J-SOX internal controls, and data privacy rules (GDPR, HIPAA, FTC).

 * Third-Party Vendor Risk & Framework Governance: Executing end-to-end security evaluations and assessments for third-party vendors and suppliers, issuing risk questionnaires, verifying security controls, and aligning vendor risk with ISO, NIST CSF 2.0, NIST SP 800-53, etc..
 * Policy Management & Metrics: Improving and updating global security policies, standards, and procedures while compiling KPIs/KRIs across audit findings and vendor risks for reporting to Executive Management