GRC Analyst

Job Title: Governance, Risk & Compliance (GRC) Analyst

Company: Protecte Technologies

Employment Type: Full-Time (Contractual)

Experience Required: 1–2 years

Location: Remote

Reporting To: GRC Manager (under vCISO supervision)

About the Role:

Protecte Technologies is hiring a detail-oriented and motivated GRC Analyst with 3+ years of relevant experience to support ongoing compliance and risk management activities. This role offers an opportunity to work on high-impact cybersecurity compliance projects in a remote, fast-paced consulting environment, reporting to the GRC Manager and working under the guidance of the vCISO.

Key Responsibilities:

• Assist in the implementation and maintenance of governance, risk, and compliance frameworks.
• Support internal risk assessments and documentation of findings.
• Draft, review, and update cybersecurity policies, procedures, and process documentation.
• Track and follow up on compliance action items, audit findings, and remediation efforts.
• Maintain and update risk registers, control matrices, and compliance dashboards.
• Support third-party risk assessments and vendor compliance reviews.
• Help coordinate internal and external audits, including evidence collection and audit readiness.
• Monitor regulatory updates and assist in mapping controls to client requirements.
• Prepare regular compliance and risk reports for management and stakeholders.

Required Skills & Experience:

• 3–5 years of hands-on experience in GRC, IT audit, or cybersecurity compliance.
• Working knowledge of standards such as ISO/IEC 27001, NIST CSF, GDPR, DORA, etc.
• Experience with compliance tracking, document management, and risk tools.
• Strong attention to detail with excellent organizational and documentation skills.
• Ability to work remotely with minimal supervision and meet deadlines consistently.
• Good communication skills and ability to collaborate across departments.

Preferred Qualifications (not mandatory):

• ISO 27001 Foundation / Internal Auditor
• CISA / CRISC / CompTIA Security+
• Experience with GRC tools (e.g., Archer, OneTrust, Excel-based trackers)

Role Details:

• Contract Duration: 6–12 months (extendable)
• Working Hours: Full-time (Remote)
• Reporting Line: GRC Manager at Protecte Technologies
• Supervision: Oversight by Protecte’s vCISO
• Compensation: Commensurate with experience