GRC Analyst

🔥 1 minute ago

🌪️ Kansas – Remote

🌪️ Kansas – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Optiv

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

Optiv Security is the cyber advisory and solutions leader, delivering strategic and technical expertise to nearly 6,000 companies across every major industry. We partner with organizations to advise, deploy and operate cybersecurity programs from strategy and managed security services to risk, integration and technology solutions. With clients at the center of our unmatched ecosystem of people, products, partners and programs, we accelerate business progress like no other company can.We manage cyber risk so you can secure your full potential.

📋 Description

• Generate user access and permissions reports using approved systems, report parameters, and procedures • Reconcile non-user and inactive accounts across in-scope systems; document discrepancies and route exceptions • Maintain records related to staffing, assigned duties, access, and control reviews • Support elevated-access reviews and exception handling • Review system activity logs and audit trails according to defined criteria and schedules • Archive, organize, and review security- and audit-related email reports and records • Check assigned evidence for completeness, accuracy, applicable period, source, and retrievability • Maintain traceable records of source, review status, disposition, owner, exception, escalation, and completion date • Complete compliance forms, review trackers, attestations, and supporting records • Assist in preparing audit reports and supporting evidence for regulatory and assigned reviews • Perform accuracy, completeness, consistency, and traceability checks on deliverables • Respond to assigned evidence or information requests and document completion, dependencies, and exceptions • Manage report queues and request tracking for GRC and third-party risk workflows • Monitor aging items, follow up for missing information, and escalate blockers or overdue requests • Coordinate with stakeholders to clarify requests and support timely completion • Perform assigned work using client-owned or client-approved systems during applicable service windows • Follow procedures, access restrictions, data-handling requirements, naming conventions, and evidence-retention practices • Protect confidential, security-sensitive, employee, and access-related information • Prepare status and operational metrics, including timeliness, aging, completion, exceptions, and quality • Identify recurring process or data-quality issues and recommend procedure clarifications • Escalate suspected control failures, anomalous activity, unresolved reconciliation issues, missing audit evidence, access concerns, overdue work, and decisions outside assigned authority

🎯 Requirements

• At least 2 years of relevant experience in GRC, audit support, access governance, compliance operations, cybersecurity, risk management, third-party risk operations, or a related control function • Working knowledge of access governance, account status and ownership, elevated access, exception handling, evidence quality, record retention, and escalation practices • Familiarity with foundational audit and compliance concepts, including source evidence, review criteria, populations, findings, management responses, and remediation records • Ability to review structured records, reconcile data across systems, identify discrepancies, maintain evidence, and follow defined procedures • Proficiency with spreadsheet analysis and reporting, including filtering, lookups, reconciliation, and pivot tables • Experience with workflow systems, email-based reports, and document repositories • Ability to manage recurring and request-driven work, meet deadlines, maintain accurate trackers, and escalate exceptions promptly • Ability to handle confidential and security-sensitive information with discretion and comply with applicable access, privacy, and data-handling requirements • Ability to communicate clearly with technical and nontechnical stakeholders and document work so that it is reviewable and auditable • Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or an equivalent combination of education, training, certifications, military service, and relevant practical experience • Experience with access reporting, elevated-access reviews, inactive-account reconciliation, review trackers, evidence repositories, and exception records • Experience preparing audit evidence, compliance reports, or regulatory support materials under established review criteria • Experience supporting GRC or third-party risk workflows in a managed-services environment • Experience with spreadsheet, workflow, document-repository, GRC, or identity-governance platforms • Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or applicable regulatory requirements • Relevant training or certification such as Security+, CISA, CRISC, CGRC, or comparable coursework (preferred)

🏖️ Benefits

• A company committed to our inclusive value through our Employee Resource Groups • Work/life balance • Professional training resources • Creative problem-solving and the ability to tackle unique, complex projects • Volunteer Opportunities through “Optiv Chips In” • The ability and technology necessary to productively work remotely/from home (where applicable)