Sr. GRC Analyst

We are looking for a Sr. GRC Analyst to work remotely for Apex Systems, supporting clients in Columbus, Bartholomew County, US. This contract role focuses on governance, risk, and compliance within cybersecurity and audit domains.

Key Responsibilities

• Perform comprehensive risk assessments and develop mitigation strategies for IT and business processes.
• Lead compliance reviews against frameworks such as NIST, ISO 27001, SOC 2, and PCI DSS.
• Design, test, and monitor application controls and security controls across multiple environments.
• Collaborate with internal and external auditors to prepare evidence, respond to audit findings, and implement remediation plans.
• Provide consulting advice to clients on GRC best practices, policy development, and continuous improvement.
• Document risk registers, control matrices, and compliance reports for senior leadership.

Required Qualifications

• 5+ years of experience in GRC, risk analysis, internal or external auditing, or cybersecurity consulting.
• Strong knowledge of governance frameworks and regulatory requirements (e.g., NIST, ISO, SOX, GDPR).
• Hands‑on experience with application control testing, vulnerability management, and security monitoring tools.
• Excellent analytical, communication, and presentation skills.
• Relevant certifications such as CISA, CRISC, CISSP, or equivalent are preferred.

Compensation & Benefits

Annual salary: $107,823.73 (contract rate). Remote work arrangement.

Frequently Asked Questions

Is this position fully remote?

Yes, the Sr. GRC Analyst role is a remote contract position.

What certifications are preferred for this job?

Certifications such as CISA, CRISC, CISSP, or similar are highly valued.

What compliance frameworks will I work with?

You will work with frameworks like NIST, ISO 27001, SOC 2, PCI DSS, and related regulations.