Search Jobs | Dice.com

Job Details

Skills

GRC Analyst
GRC
GDPR
NIST CSF
ISO 27001
CISA
CRISC
CISSP
CIPP/E
CIPM
Pharmaceutical
Biotech
Healthcare
ServiceNow GRC
OneTrust
Archer

Summary

Title: GRC Analyst

Location: Boston, MA (Onsite once in a month)

Duration: 12 Months (Possible Extension)

Summary:

We are seeking a highly analytical and experienced GRC Analyst to lead risk assessments, draft robust security policies, and ensure compliance across global frameworks. In this role, you will bridge the gap between technical security measures and regulatory requirements.
The ideal candidate will have strong hands-on experience conducting Third-Party Risk Assessments, performing comprehensive Gap Analyses, and evaluating Product Risks. Furthermore, given our global footprint, deep familiarity with GDPR alongside standard security frameworks (NIST CSF, ISO 27001) is critical.
Key Responsibilities

Comprehensive Risk Assessments: Conduct end-to-end Risk Assessments (RA) on internal systems, business processes, and emerging products (Product Risk Assessments) to identify and mitigate vulnerabilities.
Third-Party & Vendor Risk Management (TPRM): Lead security reviews on third-party vendors, partners, and SaaS tools to evaluate their security posture and ensure they meet organizational standards before onboarding.
Policy Drafting & Governance: Author, update, and implement comprehensive Information Security (IS) policies, standards, and guidelines aligned with industry best practices and global frameworks.
Regulatory Compliance & GDPR: Ensure continuous compliance with global data privacy regulations, specifically GDPR and US-specific requirements, coordinating closely with legal and privacy teams.
Gap Analysis & Audit Prep: Execute regular gap analyses against frameworks like NIST CSF and ISO 27001 to identify weaknesses in the current security posture and drive remediation plans.
Metrics & Reporting: Develop risk registers, track remediation efforts, and prepare performance dashboards for local and global leadership teams.

Required Qualifications & Skills

Experience: 4+ years of dedicated experience in IT Governance, Risk, and Compliance (GRC) or IT Audit.
Framework Mastery: Strong working knowledge of NIST CSF, ISO/IEC 27001, and GDPR compliance.
Hands-on Assessment Skills: Proven experience conducting Third-Party/Vendor Risk Assessments and Product/Application Risk Assessments.
Technical Writing: Exceptional ability to draft clear, concise, and enforceable Information Security policies from scratch.
Preferred Certifications: Possession of (or active pursuit of) one or more of the following:
CISA (Certified Information Systems Auditor)
CRISC (Certified in Risk and Information Systems Control)
CISSP (Certified Information Systems Security Professional)
CIPP/E or CIPM (Certified Information Privacy Professional/Europe)

Preferred Qualifications

Experience working in a global organization with cross-border data transfer requirements.
Experience in highly regulated industries (e.g., Pharmaceuticals, Biotech, Healthcare, or Finance).
Familiarity with GRC management tools (e.g., ServiceNow GRC, OneTrust, Archer).

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91126494
Position Id: 9026442
Posted 1 day ago

Company Info

About Trigent Software, Inc. Account Number

Trigent is a global leader in software solutions, headquartered in Southborough, MA, with development centers in Boston, Bangalore. As an ISO 9001:2008 certified company, Trigent provides proven results to global Independent Software Vendors (ISVs), Fortune 500 enterprises and SMBs in the High Tech, Healthcare, Education, E-Commerce and Manufacturing businesses. Founded in 1995, Trigent has been consistently recognized for its breakthrough solutions, strategic insights and execution excellence. Trigent provides offshore software development, outsourced product development, web and custom application, product engineering, mobile application development & testing services SharePoint consulting, cloud, SaaS, system integration, legacy system migration, software quality assurance and testing, AS/400, and technical support services from its offshore development center in Bangalore. Trigent’s mission is to enable customers 'Overcoming Limits' of competitiveness, productivity, technology complexity, time, and budget constraints through offshore software development and outsourced product engineering. Visit www.trigent.com for more information on our IT consulting services.

Security Engineer

Hybrid in Boston, Massachusetts

•

Today

Title: Security EngineerLocation: Boston, MA (Onsite once in a month)Duration: 12 Months (Possible Extension)Summary:We are seeking a highly motivated,hands-on Security Engineerto design, build, and deploy robust security protections across our US enterprise, R&D, and lab networks. This is not a passive monitoring or triage role; we are looking for a true engineer who can "roll up their sleeves" to implement defensive tools, automate guardrails, and harden infrastructure. Given our footprint as

Easy Apply

Contract

35 - 60

Filter Results

Job post features

Posted date

Work settings

Employment type

Distance

Employer type

Work authorization

GRC Analyst

Skills

Summary

Dice Job Match Score™

Kirti Kachhap

Similar Jobs

GRC Analyst

Trigent Software, Inc. Account Number

Job Details

Skills

Summary

Company Info

About Trigent Software, Inc. Account Number

Dice Job Match Score™

Kirti Kachhap

Similar Jobs