Senior GRC Analyst

🕒 May 15

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟠 Senior

🎲 Risk

👻 Ghost score 71%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Hotman Group, LLC

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2016

💼 Consulting

🏥 Healthcare

⚖️ Legal

Consulting • Healthcare • Legal

Hotman Group, LLC is a leading provider of comprehensive cybersecurity and governance, risk, and compliance (GRC) services. The company assists business leaders in enhancing client trust by offering robust cybersecurity strategies and addressing GRC challenges. Hotman Group specializes in developing cybersecurity strategies, executing one-time projects, and augmenting staff. The firm helps businesses unify risk, compliance, and security in a sustainable manner, ensuring readiness for audits, and establishing business continuity plans. By focusing on both technology and the necessary human elements, Hotman Group aims to protect businesses fully and strategically align them with security compliance frameworks such as SOC 2 and NIST CSF.

📋 Description

• Lead assessments and audits of security and IT control environments • Design, implement, and mature cybersecurity and compliance programs • Develop risk registers, conduct risk assessments, and track remediation efforts • Create and refine policies, standards, and procedures aligned with SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST, CMMC, and other frameworks • Prepare clients for internal audits and external assessments • Translate technical, regulatory, and business requirements into actionable client deliverables • Communicate findings, manage client feedback, and drive outcomes despite stakeholder pushback • Mentor junior analysts and contribute to GRC practice growth • Participate in peer review of client deliverables • Work directly with clients across multiple industries and diverse engagements

🎯 Requirements

• Experienced GRC practitioner with hands-on experience owning deliverables • Track record producing frameworks-based documentation and driving remediation • Deep working knowledge of SOC 2, ISO 27001, NIST CSF, HIPAA, and HITRUST • Experience communicating findings and recommendations directly to clients or senior internal stakeholders • Excellent writing skills and ability to produce clear, polished deliverables • Strong critical thinking and professional judgment • High level of accountability and ownership • Ability to work independently in a fully remote environment with minimal hand-holding • Strong communication and responsiveness • Active certification such as CISA, CISM, CISSP, or CRISC strongly preferred; otherwise actively pursuing a relevant certification • Permanent authorization to work in the U.S.; no sponsorship now or in the future • Able to pass a background check • Reliable high-speed internet and a secure, private remote workspace • Must complete a written questionnaire, video responses, practical skills assessment, and panel interview

🏖️ Benefits

• Full-time, remote, contract-to-hire position • Top performers move into permanent roles within 6 months • Work across multiple industries and diverse engagements • Exposure to numerous GRC frameworks, industries, and client situations • Mentoring and professional growth opportunities