Position Details
About this role
Remote Contract to Hire Governance, Risk and Compliance (GRC) Analyst role supporting IT and business GRC program design, execution, and continuous improvement. You will perform IT risk assessments, support SOX ITGCs and SOC/internal audits, and manage access governance and remediation activities through audit-ready documentation.
Key Responsibilities
- Support the design, execution, and continuous improvement of GRC programs across IT and business processes
- Perform IT risk assessments, identify control gaps, and assist with remediation planning and tracking
- Support SOX ITGCs, SOC, and internal audits including walkthroughs, testing coordination, evidence collection, and audit response management
- Evaluate and document control design and operating effectiveness for access, change management, and IT operations controls
- Maintain accurate and audit-ready documentation, risk registers, control matrices, and compliance artifacts
Technical Overview
The role focuses on IT GRC and audit support, including evaluating control design and operating effectiveness for access, change management, and IT operations. It leverages GRC frameworks and tools such as NIST, COBIT, RMF, CSF, and platforms like ServiceNow GRC, Archer, SecurEnds, and Saviynt.
Ideal Candidate
The ideal candidate is a mid-level GRC professional with 3-5+ years supporting Governance, Risk, and Compliance (GRC) programs across IT controls. They have strong experience with IT general controls (access, change, operations) and supporting SOX and SOC audit activities, including evidence collection and audit response management. They are comfortable documenting control design and operating effectiveness and managing audit-ready artifacts such as risk registers and control matrices, using GRC tooling like ServiceNow GRC, Archer, or Saviynt.
Must-Have Skills
Tools & Platforms
Required Skills
Hard Skills
Soft Skills
Industry & Role
Keywords for Your Resume
Deal Breakers
Bachelor's degree required, 3-5+ years of experience in GRC, IT Risk, Compliance, or Audit required, Strong understanding of IT general controls (access, change, operations) required, SOX Experience required, SOC Experience required, NYSDFS Experience (New York State Department of Financial Services) required, FLOIR Experience (Florida Office of Insurance Regulation (OIR)) required
Get matched to jobs like this
Luna finds roles that fit your skills and career goals — no endless scrolling required.
Create a Free Profile