GRC Analysts I

Junior-Level GRC Analysts

Department: Governance Risk & Compliance (GRC)
Reports To: Compliance Manager
Location: Remote
Working Hours: U.S. Eastern Time (ET) business hours
Employment Type: Full-Time
Level: Entry / Early Career

About Jun Cyber

Jun Cyber is a cybersecurity and compliance services company focused on helping organizations strengthen their cybersecurity programs meet regulatory and contractual requirements and achieve and maintain compliance with frameworks such as CMMC NIST SOC 2 and ISO 27001.

Our team works across Governance Risk & Compliance (GRC) managed IT services cybersecurity continuous monitoring and compliance program management to help clients build secure sustainable and audit-ready environments.

Position Summary

Jun Cyber is seeking a Junior-Level GRC Analysts to support our Governance Risk & Compliance team in delivering cybersecurity compliance and assessment services.

The Compliance Analyst will support routine compliance monitoring control testing evidence collection and validation documentation remediation tracking audit preparation and reporting activities. This is an early-career role designed for a highly organized and detail-oriented professional who is interested in developing a career in cybersecurity GRC and compliance.

The successful candidate will work under established procedures and guidance while collaborating with GRC analysts compliance managers technical teams and client stakeholders to help ensure that cybersecurity controls are properly implemented documented monitored and supported by sufficient evidence.

Key Responsibilities

Compliance Monitoring & Control Testing

• Perform periodic reviews of cybersecurity controls against applicable requirements.

• Conduct basic control assessments and document test results.

• Monitor compliance activities and identify missing or incomplete requirements.

• Assist with monthly and quarterly compliance monitoring activities.

• Track remediation activities and outstanding compliance issues.

Evidence Management

• Request collect organize and validate compliance evidence.

• Maintain evidence repositories and ensure documentation is complete and current.

• Identify missing outdated or insufficient evidence and escalate as appropriate.

• Maintain evidence traceability to applicable controls and requirements.

Policy & Documentation

• Assist with maintaining cybersecurity policies standards procedures and supporting documentation.

• Review documentation for consistency with established compliance requirements.

• Maintain compliance records assessment workpapers and control documentation.

Risk & Remediation Support

• Assist with identifying compliance gaps and control deficiencies.

• Track POA&Ms corrective actions and remediation activities.

• Follow up with control owners regarding outstanding remediation items.

• Escalate overdue or significant issues to the Compliance Manager.

Assessments & Audits

• Support internal and external audits and assessments.

• Prepare requested evidence and documentation.

• Assist with auditor requests and maintain audit request trackers.

• Participate in assessment preparation activities.

Reporting

• Prepare routine compliance status reports and dashboards.

• Maintain compliance metrics and tracking spreadsheets.

• Escalate significant compliance issues or trends.

Qualifications

• 13 years of experience in cybersecurity IT audit risk compliance or a related field.

• Basic understanding of cybersecurity concepts and controls.

• Familiarity with one or more frameworks such as NIST CSF NIST SP 800-53 NIST SP 800-171 CMMC ISO 27001 SOC 2 HIPAA or PCI DSS.

• Strong documentation and organizational skills.

• Ability to analyze information and identify inconsistencies or gaps.

• Strong written and verbal communication skills.

• Proficiency with Microsoft Office or comparable productivity tools.

Preferred Certifications

• Security

• ISC2 CC

• CISA preferred but not required

• Other cybersecurity or compliance certifications

Success Measures

• Accurate and timely completion of assigned compliance activities.

• Quality and completeness of collected evidence.

• Timely identification and escalation of compliance gaps.

• Accurate maintenance of compliance records.

• Successful completion of assigned audit and assessment activities.