> Markdown version of [/jobs/ext/611438-security-grc-analyst](https://www.wearedevelopers.com/jobs/ext/611438-security-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security GRC Analyst

- **Company:** Information Resource Group, Inc.
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** Cyber Security, PCI Data Security Standards, Information Security Management System
- **Published:** June 24, 2026
- **Apply:** https://www.dice.com/job-detail/70ea1eb0-aa2d-4eb7-a4e1-8cf93ddade24

## About the Role

* 10+ Years of Experience in Information Security and Compliance.
 * 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer
 * Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)
 * Prior Experience POA&M or CAP.
 * Strong Communication Experience.
 * Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)
 * Bachelor's Degree - field of study is open, but the degree must be complete and verifiable

Preferred Skills:

 * Have completed an information security plan or system security plan notebook.
 * Simultaneously, manage multiple infosec work efforts.
 * Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.
 * Government sector experience
 * CISA, GSLC, or equivalent certification

## Description

* New Position to assist client with the execution of its responsibilities under the statewide information security program


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Communicate efficiently with Software Architecture Diagrams](https://www.wearedevelopers.com/videos/379-communicate-efficiently-with-software-architecture-diagrams)
- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)