Judge Group, Inc.
Judge Group, Inc.

Governance Risk & Compliance (GRC) Analyst

Lakewood, CO, US • Posted 17 hours ago • Updated 5 hours ago
Contract Independent
On-site
USD $55.00 - 65.00 per hour
Company Branding Image
Fitment

Dice Job Match Score™

📊 Calculating match score...

Job Details

Skills

  • Sarbanes-Oxley
  • KPI
  • Training
  • Security Awareness
  • E-learning
  • Internal Communications
  • ICS
  • Regulatory Compliance
  • Documentation
  • Collaboration
  • Information Security
  • IT Audit
  • Risk Management
  • Communication
  • Leadership
  • Risk Assessment
  • Auditing
  • Security Analysis
  • SAP GRC
  • EMC RSA Archer
  • Endpoint Protection
  • Cloud Computing
  • Vulnerability Management
  • Data Analysis
  • Dashboard
  • Reporting
  • NIS
  • Artificial Intelligence
  • Cyber Security
  • Information Systems
  • Computer Science
  • CISSP
  • CISA
  • CISM
  • ISO/IEC 27001:2005
  • Privacy
  • Marketing

Summary

Location: Lakewood, CO
Salary: $55.00 USD Hourly - $65.00 USD Hourly
Description: Our client is currently seeking a Governance Risk & Compliance (GRC) Analyst
Governance, Risk & Compliance (GRC) Analyst

Contract-to-Hire | $130-140K Conversion Salary | Remote OK (Denver onsite preferred; relocation available upon conversion)
Role Overview

The GRC Analyst supports the Global Information Security Office by driving governance, risk management, and compliance initiatives across the organization. This role requires a proactive, flexible professional who can operate in a fast-changing environment, communicate effectively with leadership, and quickly take ownership of key GRC activities.

Key Responsibilities
Risk, Audit & Compliance
  • Support company-wide information security risk assessments for projects, systems, and vendors.
  • Assist with internal and external audits (e.g., J-SOX), evidence collection, and remediation tracking.
  • Maintain compliance with ISO 27001, NIS2, GDPR, and other regulatory frameworks.
  • Contribute to policy development, updates, and global rollout.
Vendor & Third-Party Risk
  • Conduct vendor security assessments, review questionnaires, validate controls, and document findings.
  • Escalate high-risk issues and support mitigation follow-up.
Dashboards & Reporting
  • Develop and maintain dashboards, including the CISO Dashboard.
  • Collect, validate, and analyze KPIs/KRIs related to compliance, risk, audits, incidents, and training.
  • Present insights to leadership with clear, accurate reporting.
Security Awareness & Training
  • Support security awareness initiatives, including e-learning content, phishing exercises, and internal communications.
Regulatory Monitoring
  • Track global cybersecurity regulatory changes (e.g., NIS2, ICS/OT requirements, FDA expectations).
  • Support gap assessments and compliance readiness.
AI Security Oversight
  • Assist in evaluating risks related to AI systems and third-party AI tools.
  • Support governance controls for secure AI use.
Additional Responsibilities
  • Improve GRC processes, tools, and documentation.
  • Support internal projects, automation efforts, and cross-functional initiatives.
  • Provide coordination for security committees and working groups.


Required Qualifications
  • 3-5+ years in information security, GRC, IT audit, or risk management.
  • Strong communication skills; comfortable engaging with leadership.
  • Experience with ISO 27001 and NIS2 (required).
  • Experience conducting or supporting risk assessments and audits.
  • Understanding of vendor security assessment processes.
  • Ability to work independently in a dynamic environment with shifting priorities.


Preferred Skills
  • Experience with GRC platforms (e.g., BitSight, Drata, OneTrust, Archer).
  • Familiarity with cybersecurity domains (IAM, endpoint security, cloud, vulnerability management).
  • Data analysis and dashboard/reporting experience.
  • Awareness of emerging regulations (NIS2, AI governance, critical infrastructure).
  • Experience working with global teams.


Education
  • Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field-or equivalent experience.
  • Certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Implementer/Auditor are a plus.

By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.

Contact:

This job and many more are available through The Judge Group. Please apply with us today!
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: cxjudgpa
  • Position Id: 1128754
  • Posted 17 hours ago

Company Info

About Judge Group, Inc.

The Judge Group, is a leading professional services firm specializing in talent, technology, and learning solutions. We consult, staff, train, and solve. Through our work we make people and organizations better.

Our services are successfully delivered through a network of more than 30 offices across the United States, Canada, and India. The Judge Group is proud to partner with the best and brightest companies in business today, including over 60 of the Fortune 100. We serve organizations in financial services, healthcare, life sciences, insurance, government (including aerospace and defense), manufacturing, and technology and telecommunications.

About_Company_OneAbout_Company_Two
Go to company profile
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Network Security Engineer

Salt Lake City, Utah

•

Today

Contract

USD 60.00 - 80.00 per hour

ServiceNow SecOps Engineer

Draper, Utah

•

Today

Contract

Technical Program Manager (PCI DSS)

Phoenix, Arizona

•

Today

Contract

USD 130,000.00 - 135,000.00 per year

Information Security Analyst

Chandler, Arizona

•

Today

Contract

USD 53.00 - 57.00 per hour

Search all similar jobs