Entry Level GRC Analyst

Hotman Group, LLC • Fort Worth, TX

9d • Remote

About The Position

Are you a creative problem-solver who loves a good challenge? Passionate about cybersecurity, risk, and compliance? Ready to grow your career in an environment that’s dynamic, supportive, and full of opportunity?
Hotman Group (HG) is looking for driven, detail-obsessed team members to join our rapidly growing boutique firm as a full-time, remote Entry-Level GRC Analyst. This is a contract-to-hire position with top performers moving to permanent roles within 6 months — and trust us, we want you to be one of them.
As a GRC Analyst at Hotman Group, you’ll be helping our clients strengthen their cybersecurity and compliance programs. You’ll work side-by-side with senior team members and partners to:
You’ll touch every aspect of cybersecurity and GRC — no boring, repetitive work here. Every day will bring new opportunities to learn, grow, and make a real impact.

Requirements

• Bachelor’s or Graduate degree in Cybersecurity, Information Systems, or a related field
• 0-2 years of relevant experience (cybersecurity, audit, risk, compliance, GRC)
• Solid understanding of fundamental security and IT concepts (access controls, data retention, change management, etc.)
• Familiarity with major security and privacy frameworks (ISO, NIST, SOC 2, HIPAA, etc.)
• Strong critical thinking, organization, and communication skills
• Ability to balance multiple projects and deadlines with exceptional follow-through
• Technical aptitude — you’re curious, you learn fast, and you don't shy away from new tools
• A passion for cybersecurity and a commitment to helping companies build safer, stronger environments
• Located in the USA with permanent work authorization
• Ability to pass a background check
• Reliable internet and a secure remote workspace

Nice To Haves

• Bonus points if you’re already pursuing a security or risk certification!

Responsibilities

• Assess and improve client security and IT controls
• Develop policies, processes, and risk assessments aligned to top frameworks like NIST, ISO 27001, and SOC 2
• Crosswalk and harmonize controls across multiple compliance frameworks
• Analyze, recommend, and implement security best practices
• Build risk registers, lead assessments, and monitor remediation progress
• Work hands-on with GRC tools and contribute to innovative solutions for complex challenges
• Translate technical and regulatory requirements into clear, actionable steps for our clients

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level