GRC Analyst

Zone & Co is seeking a GRC Analyst to help safeguard the organization and its customers' data. The role requires a strong foundational knowledge of major security frameworks and privacy regulations, and the ability to clearly communicate compliance postures to internal engineering teams and enterprise customers.

Requirements

• 3+ years of direct experience in IT Audit, Information Security, Privacy Operations, or GRC
• Hands-on experience working with established compliance frameworks (SOC 2, ISO 27001)
• A solid understanding of cloud computing architectures (AWS, Azure, GCP) and enterprise software environments
• Exceptional communication skills, including written and verbal communication
• Bachelor’s degree in Information Systems, Cybersecurity, Business, or a related field
• Relevant industry certifications such as CISA, CISM, CIPP/E, CIPP/US, or Security+

Benefits

• Generous Paid Time Off
• 401k Matching
• Tuition Reimbursement
• Relocation Assistance