> Markdown version of [/jobs/ext/637864-information-security-grc-analyst](https://www.wearedevelopers.com/jobs/ext/637864-information-security-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security GRC Analyst

- **Company:** Xylo Technologies, Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary to permanent
- **Skills:** Cyber Security, PCI Data Security Standards, Information Security Management System
- **Published:** June 25, 2026
- **Apply:** https://www.dice.com/job-detail/818d68ce-e1d5-4fd4-8042-e7cf1ac1c087

## About the Role

· 10+ Years of Experience in Information Security and Compliance.

· 2+ Years of Experience with security audits based on a standard control set as an auditor or responding information system security officer

· Must Have a Strong Working Knowledge of NIST 800-53 (2 Years of Experience)

· Prior Experience POA&M or CAP.

· Strong Communication Experience.

· Experience With Using A GRC Tool (Archer or Similar) (3 Years of Experience)

· Education - Bachelor''s Degree - field of study is open, but the degree must be complete and verifiable

Preferred Skills

· Have completed an information security plan or system security plan notebook.

· Simultaneously, manage multiple infosec work efforts.

· Knowledge of IRS 1075, HIPAA, CJIS, MARS-E and/or PCI-DSS.

· Government sector experience

· Certification - CISA, GSLC, or equivalent certification

## Description

· Work Location: Role is 100% Remote. Preference will be given to local candidates who can come to the office as needed for client and departmental meetings, trainings, and other onsite activities.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Communicate efficiently with Software Architecture Diagrams](https://www.wearedevelopers.com/videos/379-communicate-efficiently-with-software-architecture-diagrams)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)