GRC Analysts I

Jün Cyber•St. Petersburg, FL

7d•Remote

About The Position

Jun Cyber is a cybersecurity and compliance services company focused on helping organizations strengthen their cybersecurity programs, meet regulatory and contractual requirements, and achieve and maintain compliance with frameworks such as CMMC, NIST, SOC 2, and ISO 27001. Our team works across Governance, Risk & Compliance (GRC), managed IT services, cybersecurity, continuous monitoring, and compliance program management to help clients build secure, sustainable, and audit-ready environments. Jun Cyber is seeking a Junior-Level GRC Analysts to support our Governance, Risk & Compliance team in delivering cybersecurity compliance and assessment services. The Compliance Analyst will support routine compliance monitoring, control testing, evidence collection and validation, documentation, remediation tracking, audit preparation, and reporting activities. This is an early-career role designed for a highly organized and detail-oriented professional who is interested in developing a career in cybersecurity, GRC, and compliance. The successful candidate will work under established procedures and guidance while collaborating with GRC analysts, compliance managers, technical teams, and client stakeholders to help ensure that cybersecurity controls are properly implemented, documented, monitored, and supported by sufficient evidence.

Requirements

1–3 years of experience in cybersecurity, IT, audit, risk, compliance, or a related field.
Basic understanding of cybersecurity concepts and controls.
Familiarity with one or more frameworks such as NIST CSF, NIST SP 800-53, NIST SP 800-171, CMMC, ISO 27001, SOC 2, HIPAA, or PCI DSS.
Strong documentation and organizational skills.
Ability to analyze information and identify inconsistencies or gaps.
Strong written and verbal communication skills.
Proficiency with Microsoft Office or comparable productivity tools.

Nice To Haves

Security+
ISC2 CC
CISA — preferred but not required
Other cybersecurity or compliance certifications

Responsibilities

Perform periodic reviews of cybersecurity controls against applicable requirements.
Conduct basic control assessments and document test results.
Monitor compliance activities and identify missing or incomplete requirements.
Assist with monthly and quarterly compliance monitoring activities.
Track remediation activities and outstanding compliance issues.
Request, collect, organize, and validate compliance evidence.
Maintain evidence repositories and ensure documentation is complete and current.
Identify missing, outdated, or insufficient evidence and escalate as appropriate.
Maintain evidence traceability to applicable controls and requirements.
Assist with maintaining cybersecurity policies, standards, procedures, and supporting documentation.
Review documentation for consistency with established compliance requirements.
Maintain compliance records, assessment workpapers, and control documentation.
Assist with identifying compliance gaps and control deficiencies.
Track POA&Ms, corrective actions, and remediation activities.
Follow up with control owners regarding outstanding remediation items.
Escalate overdue or significant issues to the Compliance Manager.
Support internal and external audits and assessments.
Prepare requested evidence and documentation.
Assist with auditor requests and maintain audit request trackers.
Participate in assessment preparation activities.
Prepare routine compliance status reports and dashboards.
Maintain compliance metrics and tracking spreadsheets.
Escalate significant compliance issues or trends.