Mid GRC Analyst

About the role

The Mid‑Level GRC Analyst works at the intersection of governance, risk, and compliance, helping AspenView protect its reputation and operational resilience. You will partner with IT, security, and operations teams to embed audit readiness and strengthen risk posture across the organization.

Key responsibilities

• Lead and execute internal audits aligned with ISO 27001, SOC 2, HIPAA, SOX, or similar frameworks.
• Maintain and enhance the GRC platform (e.g., Archer, ServiceNow GRC, LogicGate) to track controls, risks, and remediation activities.
• Collaborate with cross‑functional teams to assess risks in new projects, vendors, and technologies.
• Support certification and regulatory compliance efforts by preparing documentation, evidence, and audit responses.
• Monitor and report key risk indicators (KRIs) and control effectiveness metrics to leadership.
• Identify gaps, recommend process improvements, and implement best practices for continuous improvement.

Required profile

• 3–5 years of experience in governance, risk, and compliance, preferably in a technology‑driven or regulated environment.
• Hands‑on experience with GRC tools and audit management workflows.
• Strong analytical ability to translate complex regulations into actionable controls.
• Excellent communication skills for both technical and non‑technical audiences.
• Proactive, detail‑oriented mindset with a passion for secure and ethical business practices.

Required skills

• Archer
• LogicGate
• ServiceNow GRC
• ISO 27001
• SOC 2
• NIST CSF
• HIPAA
• SOX

What we offer

• Competitive base salary
• Comprehensive benefits and wellness support
• Flexible work model (hybrid, remote, or in‑office)
• Real growth opportunities and leadership visibility
• Inclusive, respectful culture blending U.S. innovation with Colombian heart