Analyst II, Governance, Risk and Compliance

About the role

The Analyst II will support and coordinate Governance, Risk and Compliance (GRC) activities, ensuring they align with company policies, regulatory requirements, contractual obligations, and information‑security standards. You will work closely with regional and global stakeholders to manage risk, address audit findings, and drive consistent implementation of the GRC program.

Key responsibilities

• Coordinate internal, external, client and regulatory audits, preparing evidence and documentation.
• Partner with stakeholders to identify, assess, and mitigate risks across the organization.
• Track audit findings, remediation actions, and corrective‑action plans through closure.
• Perform risk, compliance, and control assessments, including gap analyses.
• Support vendor and third‑party security reviews.
• Maintain and review information‑security policies, procedures, and controls for ongoing compliance.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, IT, Business Administration, Risk Management or a related field (or equivalent experience).
• 2‑4 years of experience in GRC, information security, IT audit, or risk management.
• Experience preparing for and supporting audits, risk assessments, and compliance reviews.
• Familiarity with industry frameworks such as ISO/IEC 27001, SOC 2, NIST, PCI DSS, and HIPAA.
• Professional certifications (e.g., CompTIA Security+, CISA, CRISC, CISM, CISSP) are a plus but not required.

Required skills

• ISO/IEC 27001
• SOC 2
• NIST
• PCI DSS
• HIPAA
• CompTIA Security+
• CISA
• CRISC
• CISM
• CISSP

What we offer

• Competitive wages and incentive programs.
• Free access to personal and professional support through the Qualfon Coach program.
• Opportunity to earn a college degree via Qualfon University.
• A culture that promotes fun, learning, and growth.