GRC Specialist

• Conduct vendor security reviews using established assessment frameworks and document findings clearly
• Prepare, organize, and submit audit evidence through designated customer and compliance portals
• Assist with a range of compliance examinations by tracking requests, gathering materials, and supporting follow-up actions
• Update draft policies and procedures to reflect current control expectations and business needs
• Review customer security questionnaires for completeness and accuracy before internal spot-checks
• Analyze compliance-related workflows to uncover duplicate efforts and recommend practical process improvements
• Partner with internal stakeholders to maintain organized records that support governance and audit readiness

• 4+ years of demonstrated experience in compliance, risk, or governance-related roles within an IT or security environment
• Working knowledge of audit support for information systems and common compliance assessment practices
• Familiarity with vendor due diligence and third-party security review processes
• Ability to manage documentation carefully, including evidence collection and portal submissions
• Experience contributing to policy and procedure updates in regulated or compliance-focused settings
• Strong attention to detail with the ability to handle multiple priorities across concurrent audit activities
• Understanding of Governance, Risk, and Compliance (GRC) concepts and supporting eGRC-related processes (ISO, SOC 2, FedRAMP, CMMC)

Someone who can help identify maturity gaps, recommend improvements, and help automate GRC processes

• Medical, vision, dental, and life and disability insurance
• Enrollment in company 401(k) plan