IT Governance, Risk & Compliance (GRC) Analyst II

Invenergy • Chicago, IL

1d • $75,000 - $103,000 • Hybrid

About The Position

The IT Governance, Risk & Compliance (GRC) Analyst II supports execution and continuous improvement of enterprise cybersecurity governance, risk, and compliance programs. The role focuses on security controls, policy governance, and regulatory compliance, and contributes to risk management, third-party assessments, audit support, and security program operations. It offers exposure across multiple cybersecurity domains and opportunities to support a growing cybersecurity program aligned with industry and regulatory best practices.

The role works with IT and business stakeholders and coordinates with teams including Legal, Information Governance, Security Operations, Infrastructure, and Security Architecture. Invenergy follows a hybrid schedule: in-office Monday through Thursday and remote on Fridays if work permits.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, or a related field, or equivalent experience.
• At least 2 years of professional experience in cybersecurity, IT security, or GRC-related roles.
• Foundational knowledge of security frameworks such as NIST SP 800-53, ISO 27001, and CIS Controls.
• Experience supporting audits, compliance programs, or control assessments.
• Strong analytical and problem-solving skills and attention to detail.
• Ability to manage multiple priorities and drive tasks to completion.
• Effective communication skills and ability to engage technical and non-technical stakeholders.
• Proactive self-starter able to work independently and collaboratively across teams.

Nice To Haves

• Experience with regulatory environments such as NERC CIP or other critical infrastructure standards.
• Experience with GRC platforms or workflow tools such as ServiceNow, Archer, or Smartsheet.
• Background in consulting, advisory, or IT audit focused on cybersecurity or compliance.
• Experience supporting vendor risk reviews or contract security assessments.
• Knowledge of cloud security concepts, including Microsoft 365 and Azure environments.
• Relevant certifications such as Security+, CISA, CRISC, CISSP, or similar.

Responsibilities

• Support the development, maintenance, and enforcement of enterprise security policies, standards, and procedures.
• Maintain and enhance the security controls catalog, aligning it with CIS Controls, NERC CIP, NIST CSF, ISO 27001, and other industry best-practice frameworks.
• Perform control assessments to evaluate design and operating effectiveness, identify gaps, and track remediation.
• Develop and maintain dashboards, metrics, and reports to measure control performance and program maturity.
• Support NERC CIP compliance activities, including evidence collection, audit coordination, remediation tracking, and follow-up.
• Assist with commissioning and compliance validation, including documentation standardization and process improvement.
• Partner with IT and business stakeholders to communicate security requirements and drive compliance.
• Contribute to third-party risk management, including vendor security assessments, due diligence reviews, and risk documentation.
• Assist with customer security questionnaires, audits, attestations, and evidence requests.
• Support contract reviews by identifying cybersecurity requirements and potential risk exposures.
• Collaborate on enterprise risk management, including risk identification, documentation, tracking, and remediation coordination.
• Track and report cybersecurity KPIs and program metrics, identifying trends and continuous-improvement opportunities.
• Act as a liaison for cybersecurity requests, collaborating with Legal, Information Governance, Security Operations, Infrastructure, and Security Architecture.
• Participate in cross-functional cybersecurity initiatives and provide operational support across cybersecurity programs as needed.
• Support incident response activities and post-incident reviews in a coordination and documentation role, as required.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401(k)
• Paid time off
• Potential eligibility to participate in bonus programs designed to reward individual and company performance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level