GRC Analyst
MACOM Technology Solutions Holdings, Inc.•Lowell, MA
•$78,000 - $125,000
About The Position
We are seeking a motivated and detail-oriented GRC Analyst to join our Information Security team. This role will support the organization’s governance, risk, and compliance initiatives, focusing on regulatory and framework alignment, third-party risk management, risk lifecycle processes, and policy governance. The ideal candidate will have foundational knowledge of information security principles, strong analytical skills, and a willingness to grow within the GRC space, especially in platforms such as ServiceNow GRC.
Requirements
- Bachelor’s degree in Information Security, Cybersecurity, IT, or related field (or equivalent experience)
- 1–3 years of experience in information security, risk, compliance, or audit (internships acceptable)
- Basic understanding of security frameworks and regulatory requirements
- Strong analytical, organizational, and documentation skills
- Excellent written and verbal communication skills
Nice To Haves
- Exposure to frameworks such as NIST, ISO 27001, SOC 2, or CIS
- Security or compliance certifications (e.g., CISM, CRISC, CISSP, CGEIT, or CISA).
- Experience with third-party risk management processes
- Familiarity with risk management concepts and methodologies
- Exposure to GRC tools (ServiceNow GRC preferred, but not required)
Responsibilities
- Assist in the implementation, maintenance, and monitoring of compliance frameworks (e.g., NIST, ISO 27001, SOX, SOC2, CIS, etc.)
- Support internal and external audit activities, including evidence collection and control validation
- Track and report on compliance status, gaps, and remediation efforts
- Conduct vendor risk assessments and due diligence reviews
- Analyze third-party security posture and identify potential risks
- Maintain vendor inventory and track risk treatment activities
- Collaborate with business owners to ensure appropriate risk mitigation
- Support the execution of the Information Security risk management lifecycle
- Assist with risk identification, assessment, documentation, and tracking
- Help maintain risk registers and ensure risks are properly escalated and monitored
- Partner with stakeholders to support risk remediation planning
- Assist in drafting, reviewing, and maintaining information security policies, standards, and procedures
- Facilitate policy review cycles, approvals, and documentation updates
- Ensure alignment with regulatory requirements and industry best practices
- Support and learn the administration and use of ServiceNow GRC
- Assist in configuring workflows, tracking activities, and improving GRC processes
- Help identify opportunities for automation and process optimization
Benefits
- Health, dental, and vision insurance.
- Employer-sponsored 401(k) plan.
- Paid time off.
- Professional development opportunities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
