GRC Analyst
Boston, MA
Category: Security
Industry: Communications
Standard Hours: Open
Reference ID: JN -102026-109260
Date Posted: 10/29/2026
Shortcut: http://careers.eliassen.com/cIkWl4
Description:
Hybrid 3 days onsite in Boston, MA
Our client seeks a GRC Analyst to implement and maintain governance frameworks, manage risk remediation activities, and ensure adherence to security standards. The role supports requirements gathering and documentation for Identity and Access Management initiatives, administers GRC inquiries across business teams, and assists with policy and standards maintenance. You will investigate GRC requests, evaluate risk, document decisions, and collaborate with cybersecurity engineering to drive outcomes.
This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.
Salary: $82,500 - $105,000/ yr. w2
JN -102026-109260
Responsibilities:
- Act as a liaison between IT and business units to support development and implementation of governance policies, standards, frameworks, and tools.
- Support requirements gathering and documentation for InfoSec projects and programs, including leading meetings to clarify requirements and workflows.
- Manage GRC ticket maintenance and guide stakeholders on GRC topics.
- Monitor and maintain risk remediation activities, document risks, track exceptions, and ensure compliance with frameworks and standards.
- Provide guidance and training to stakeholders on governance, risk, and compliance to improve adherence to processes.
- Engage with business partners to address information security governance and compliance concerns and recommend improvements.
- Assist with development of security architecture, policies, principles, and standards.
- Research and stay current on access security issues.
- Support maintenance of established information security policies, coordinate reviews with Corporate Legal, manage communications and translation needs, and document changes.
- Collaborate with cybersecurity engineering on requests and risk assessments, ensuring effective handoffs for technical implementation.
- Other duties as assigned.
Experience Requirements:
- Minimum 2 years of experience in Governance, Risk, and Compliance or Information Security.
- Experience conducting requirements gathering sessions and documentation, including data analysis preferred.
- Experience developing, documenting, and maintaining access and security policies, processes, procedures, and standards preferred.
- Strong organization, planning, and project management skills with ability to prioritize tasks.
- Ability to work with cross-functional groups and levels of employees.
- Excellent written and verbal communication skills.
- Ability to work individually and in team settings.
- Strong computer skills, including Microsoft Office; Oracle exposure a plus.
- Knowledge of access, security, and risk assessment methods and technologies.
- Familiarity with Information Security Standards (ISO 27001/27002, ITIL, etc.).
- Familiarity with Data Privacy and Compliance Regulations (MA CMR 201, HIPAA, Red Flag, etc.).
- Comfort investigating issues, asking clarifying questions, and identifying risk rather than only processing tickets.
- Ability to collaborate with cybersecurity engineers and business groups and work proactively in a high-volume environment.
- Business Analyst background with information security understanding is acceptable.
Education Requirements:
Bachelor’s degree in Information Security, Cybersecurity, Risk Management, or equivalent work experience preferred.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
IT Audit Manager
King of Prussia, PA
Description: We are seeking an experienced IT Audit Manager to lead technology-focused internal audit activities for a large organization operating in a highly regulated environment. This position will be responsible for assessing technology risks, eva...
Date Posted: 10/15/2026 Recommended
-
Director, Security Architecture & Engagement
Burbank, CA
Description: Hybrid 4 days onsite in Burbank, CA Our client seeks a Director, Security Architecture & Engagement to act as a strategic cybersecurity advisor and trusted partner for business, product, engineering, and technology leaders. The director wi...
Date Posted: 10/08/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description:Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management experience to identify, analyze, and remediate cyber and control-related risks across a large enterprise. The role wi...
Date Posted: 10/15/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management expertise and proven project coordination. The role partners with senior leadership to identify, track, analyze, and...
Date Posted: 10/15/2026 Recommended
-
Business System Analyst (Governance)
Anywhere
Description: Remote Our client seeks an analytical technical expert and trusted advisor for enterprise systems, enterprise integration, and technology governance. The role will partner with Enterprise Architecture, Engineering, Infrastructure, Security...
Date Posted: 10/13/2026 Recommended
-
Senior Cloud DevOps Engineer II
Washington, DC
Description: Hybrid 2 in office 3 days remote in Washington, DC Our client seeks a Senior Cloud DevOps Engineer II to administer, integrate, standardize, and support enterprise DevSecOps platforms. The role focuses on bringing existing and shadow IT to...
Date Posted: 10/27/2026 Recommended
-
Remote Software Asset Management (SAM) Analyst – SBOM
Anywhere
Description: We are seeking a Software Asset Management (SAM) Analyst – SBOM & Open Source Compliance to join our Software Asset Management team. This role will be responsible for supporting and advancing our Software Bill of Materials (SBOM) program, ...
Date Posted: 10/04/2026 Recommended
-
Sr Associate - Asset Projection, Data Controls, & Governance
Anywhere
Description: We are seeking a Senior Associate – Data Controls & Governance to support the evaluation and enhancement of controls surrounding financial and asset projection data. This individual will assess how data is sourced, transformed, stored, gov...
Date Posted: 10/15/2026 Recommended
-
Sr IT Governance Analyst
Anywhere
Description: Remote Our client seeks a Sr IT Governance Analyst to provide counsel on IT controls, risk management, and audits. The role partners with the AI Center of Excellence to align internal AI development with governance standards and supports p...
Date Posted: 10/29/2026 Recommended
-
PAM Engineer
Cary, NC
Description: Hybrid in Cary, NC Our client seeks a Privileged Access Management (PAM) Engineer to strengthen privileged access security across cloud, on-premises, and hybrid environments. You will engineer and support PAM solutions, reduce privileged a...
Date Posted: 10/21/2026 Recommended
-
Azure Cloud Security and Databricks Consultant
Anywhere
Description: Remote but King of Prussia, PA or Milwaukee, WI preferred Our client seeks a security-focused Azure and Databricks specialist to support cloud migration and hardening activities associated with a transition services agreement. The consulta...
Date Posted: 10/15/2026 Recommended
-
Project Manager, AI & Machine Learning Initiatives
Irvine, CA
Description: Hybrid 3 days onsite in Irvine, CA Our client seeks an experienced Project Manager to lead and coordinate Artificial Intelligence and Machine Learning initiatives across the organization. The role drives AI and ML projects from use-case de...
Date Posted: 10/26/2026 Recommended
-
Video Management System Admin
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Video Management System Administrator to deploy, configure, integrate, and administer Avigilon ACC 7/8 VMS, NVRs, and Avigilon and Axis IP cameras in a corporate enterprise environm...
Date Posted: 10/28/2026 Recommended
-
Internal Audit Senior Manager (Direct Hire)
King of Prussia, PA
Description: On-site in King of Prussia, PA Our client is seeking an experienced Internal Audit Senior Manager to lead complex audit engagements, strengthen internal controls, and support enterprise risk management initiatives. This role will partner w...
Date Posted: 10/15/2026 Recommended
-
Security Engineer
Anywhere
Description: Remote in either Cincinnati, OH Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and co...
Date Posted: 10/08/2026 Recommended
-
Data Engineering Lead
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a senior data engineering leader who will drive hands-on development while setting technical direction across multiple initiatives. The role requires expertise in architecting, buildi...
Date Posted: 10/10/2026 Recommended
-
Solutions Architect (Oracle Fusion & EPM)
Anywhere
Description: Remote Our client is undertaking a multi-year finance transformation to replace legacy Oracle EBS and GBS with Oracle Fusion Cloud ERP and Oracle EPM. The program includes Chart of Accounts redesign, universal subledger architecture, large...
Date Posted: 10/31/2026 Recommended
-
Cybersecurity Architect
Orange, CA
Description: On-site in Orange, CA Our client has an opportunity for a Cybersecurity Architect supporting the Orange County Sheriff’s Department in Santa Ana, CA. The role provides technical leadership to design, develop, and implement enterprise secur...
Date Posted: 10/20/2026 Recommended
-
Senior Platform Engineer/ISSE
Reston, VA
Description: On-site in Reston, VA Our client seeks a Senior Platform Engineer/ISSE to design, implement, and continuously monitor security controls across containerized and cloud environments. The role will secure Kubernetes platforms, integrate loggi...
Date Posted: 10/26/2026 Recommended
-
AI Implementation & Governance Consultant
Orlando, FL
Description: Hybrid 2-3 days on site, maybe flexible after some time in Orlando, FL Our client seeks an AI Implementation & Governance Consultant to lead secure integration of AI tools across the organization. The consultant will deploy solutions, mana...
Date Posted: 10/05/2026 Recommended
-
Senior Agentic Software Engineer
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Senior Agentic Software Engineer who will design and deliver intelligent systems that combine AI agents, cloud-native architectures, automation frameworks, and modern engineering pr...
Date Posted: 10/14/2026 Recommended
-
Data Risk Manager
Richmond, VA
Description:Hybrid Onsite 3 days a week in Richmond, VA Our client seeks a Data Risk Manager to support large scale business and technology integration within the US Card domain. The role will assess data risks across data flows and downstream consumpt...
Date Posted: 10/05/2026 Recommended
-
Senior IT Project Manager
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Senior IT Project Manager to lead complex software and cybersecurity initiatives across the SDLC. The role will manage scope, schedule, cost, and risk while coordinating delivery te...
Date Posted: 10/13/2026 Recommended
-
Investment Accounting Manager
Anywhere
Description: We are seeking an experienced Investment Accounting Manager to lead a critical accounting and operational improvement initiative. This individual will serve as the program lead, assessing current-state processes, identifying root causes of...
Date Posted: 10/15/2026 Recommended
-
Product Owner – Marketing Systems and Business Analytics
Anywhere
Description: Remote Our client seeks a Product Owner – Marketing Systems and Business Analytics who will translate marketing technology and sales and marketing analytics initiatives into clear, delivery-ready work. The role will convert strategic objec...
Date Posted: 10/04/2026 Recommended
-
IT Audit Manager
Anywhere
Description: Remote Our client seeks an IT Audit Manager to support SOX testing for a client engagement. The consultant will plan, execute, and report on ITGC and application control testing, coordinate with stakeholders, and support remediation activi...
Date Posted: 10/11/2026 Recommended
-
Data Analyst
Anywhere
Description: Remote in or Richmond, VA Our client seeks a Data Analyst to partner with business stakeholders to translate needs into data solutions. The role will design metrics and dashboards, deliver business intelligence insights, and drive adherenc...
Date Posted: 10/29/2026 Recommended
-
Senior Machine Learning Operations (MLOps) Engineer
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks a Senior Machine Learning Operations (MLOps) Engineer to design, build, and optimize scalable platforms and production ML systems across the end-to-end lifecycle. You will enable feature engineeri...
Date Posted: 10/20/2026 Recommended
-
Senior Agilist
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks a Senior Agilist to support one or more Agile Squads. The role will ensure adherence to Agile and Scrum values and principles, foster a high-performing environment, and deliver sustained business ...
Date Posted: 10/27/2026 Recommended
-
MDM Technical Product Lead - Informatica 360
Anywhere
Description: Remote Our client seeks a Senior MDM Technical Product Lead – Informatica 360 to lead the architecture, design, and delivery of enterprise Master Data Management solutions. The role will drive end-to-end data architecture, scalable integra...
Date Posted: 10/07/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above