Note: The job is a remote job and is open to candidates in USA. Aaratech Inc. is a technology-driven organization focused on cybersecurity, healthcare, and enterprise solutions. The Cyber Security GRC Analyst will support governance, risk, and compliance initiatives by managing security frameworks, conducting risk assessments, supporting audit readiness, and ensuring compliance with industry standards.
Responsibilities
- Support control testing and evidence collection for NIST, ISO 27001, and SOC 2 requirements
- Conduct compliance gap assessments and track remediation activities
- Develop and maintain security policies, standards, and compliance documentation
- Perform third-party and vendor risk assessments
- Collaborate with IT, Security, and business teams during audit and compliance activities
- Prepare audit-ready documentation, reports, and compliance evidence
Skills
- • Bachelor's degree in Cyber Security, Information Technology, Information Systems, or a related field
- • 4+ years of experience in IT Audit, GRC, Compliance, or Risk Management
- • Working knowledge of NIST, ISO 27001, SOC 2, and security control frameworks
- • Experience supporting audits, compliance initiatives, and policy management
- • Strong organizational, analytical, communication, and problem-solving skills
- At this time, we are only able to consider candidates who are authorized to work in the United States without sponsorship
- • CISA certification preferred
- • NIST or ISO 27001 training/certifications
- • Experience with SOC 2 compliance and vendor risk management
- • Certifications such as CRISC, CGRC, or ISO 27001 Lead Implementer/Lead Auditor are a plus
Company Overview