Note: The job is a remote job and is open to candidates in USA. Parallels is a technology company seeking a GRC Analyst to support the maturity of its Governance, Risk, and Compliance program. The role focuses on compliance monitoring, customer security questionnaires and RFPs, third-party risk management, risk register maintenance, policy development, and audits against SOC 2, ISO 27001, and DORA requirements.
Responsibilities
- Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership
- Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence
- Support the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation
- Maintain and update the organization's risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status
- Assist in the development, review, and implementation of GRC policies and procedures. Help ensure policies stay current with regulatory changes and organizational needs, and support employee awareness of policy requirements
- Leads audits and assessments against SOC 2, ISO 27001, and DORA requirements. Assist in evidence collection, control testing, and remediation tracking for audit findings
Skills
- The ideal candidate is experienced in third-party risk management, has worked on RFPs, security questionnaires, is familiar with compliance frameworks such as SOC 2, ISO 27001, and DORA, and is comfortable working cross-functionally with IT, Legal, Product, Security, and HR
- Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
- 4+ years of experience in GRC, IT audit, information security, or a related compliance role
- Working knowledge of SOC 2, ISO 27001, and DORA (Digital Operational Resilience Act) requirements
- Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems
- Excellent written communication skills for policy drafting and compliance reporting
- Ability to work independently and manage multiple concurrent reviews and deadlines
Benefits
- We offer a fully remote workspace. There is no pressure to work in an office whatsoever.
- Hours are flexible, too!
Company Overview