Governance, Risk & Compliance (GRC) Analyst
Peregrine Technologies • Washington, DC10d • $150,000 - $165,000 • Onsite
Risk Analyst Jobs
1,078 jobs found — updated daily
Investment Risk Management Analyst
Fidelity • Boston, MA10dInvestment Risk Analyst
Manulife • Boston, MA10d • $116,000 - $202,000 • HybridAnalyst II, Credit Risk
CarMax • Atlanta, GA10d • $70,200 - $105,300 • HybridCredit Card Risk Strategy Analyst
Huntington National Bank • Columbus, OH10d • $102,000 - $208,000 • OnsiteRisk Management Analyst
Citi • Getzville, NY10d • $60,000 - $145,000 • OnsiteFinancial Risk Quantitative Analyst
U.S. Bank • Minneapolis, MN10d • $105,400 - $124,000 • HybridSenior Risk Adjustment Coding Analyst
CenterWell10d • $86,300 - $118,700 • RemoteHedge Fund Credit Risk Analyst
Nomura Holdings, inc. • New York, NY10d • $85,000 - $105,000Vulnerability and Risk Assessments Analyst
Management Solutions LLC • Oak Ridge, TN10d • OnsiteQuant Risk Analyst
Polymarket • New York, NY10d • $400,000 - $450,000 • OnsiteAssociate Risk Analyst
Concora Credit Inc. • Beaverton, OR10dRisk Management Analyst
OneOncology • Baton Rouge, LA10dSenior Analyst, Testing
Ally • Detroit, MI10d • $85,000 - $150,000 • HybridSenior Vice President
Citi • Irving, TX10d • $144,480 - $216,720 • OnsiteSr. Model Risk Analyst
Federal Home Loan Bank of Cincinnati • Cincinnati, OH10dRisk Analyst
Tabby10dJunior Research Analyst
RepRisk AG10dMerchant Risk Data Analyst
Upgrade • Atlanta, GA11dSr. Analyst, Credit Risk Loss Forecasting
First National Bank of Omaha • Omaha, NE11d • Hybrid
Governance, Risk & Compliance (GRC) Analyst (NYC or Washington D.C.)
Peregrine Technologies•Washington, DC
•$150,000 - $165,000•Onsite
About The Position
Peregrine is seeking a Governance, Risk, and Compliance (GRC) Analyst to help strengthen and scale its security and compliance program. The role supports the development and maintenance of frameworks that enable the organization to meet regulatory, contractual, and operational standards for data protection, privacy, and security. The analyst will work with engineering, product, and leadership teams to maintain compliance as the business expands into new markets and government sectors. The position supports compliance frameworks including SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, and FedRAMP. It involves organizing compliance documentation, coordinating internal audits and evidence collection, updating policies and controls with internal teams, supporting audit readiness, and helping respond to customer and vendor compliance inquiries. The analyst will also work with technical teams on identity and access management practices and maintain awareness of security best practices in cloud environments, particularly AWS. The role is based in either Peregrine’s NYC or Washington, D.C. office and requires working in the office four days per week. The stated annual salary range is $150,000–$165,000 USD. Compensation may vary based on factors including skills, experience, certifications or licenses, and work location.
Requirements
- 7–10 years of experience in information security, compliance, or risk management within regulated industries such as healthcare, finance, or government.
- Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53, or similar frameworks.
- Understanding of cloud-native SaaS environments, microservices, VPCs/VPNs, and identity management concepts such as RBAC and MFA.
- Strong attention to structure, accuracy, and organization, particularly when managing documentation and multiple compliance tasks.
- Collaborative and curious approach, with an interest in learning from others and improving processes.
- Ability to explain complex security concepts in clear, actionable language for different audiences.
- Must be based in or work from either the NYC or Washington, D.C. office four days per week.
Nice To Haves
- Certifications such as CGRC, CISSP, CISA, CIPP/US, HCISPP, or CompTIA Security+.
- Cloud security certifications such as CCSP, CCSK, AWS Security – Specialty, AWS Solutions Architect – Associate, or CompTIA Cloud+.
- Experience working with public safety, justice, or government agencies, or other highly regulated data environments.
- Familiarity with CJIS, SOC 2, or overlapping control frameworks.
- Interest in building scalable, user-friendly compliance systems in a fast-growing organization.
Responsibilities
- Support implementation, tracking, and continuous improvement of compliance frameworks, including SOC 2, CJIS, HIPAA, ISO 27001, GDPR, FedRAMP, and NIST 800-53.
- Manage and organize compliance documentation, internal audits, and evidence collection for internal and external stakeholders.
- Collaborate with internal teams to update policies, procedures, and controls related to data protection, access management, and incident response.
- Maintain awareness of cloud security best practices, particularly for AWS services such as GuardDuty, SecurityHub, Amazon Inspector, and AWS Config.
- Use compliance management tools such as Vanta, Drata, SecureFrame, or HyperProof to streamline reporting and evidence collection.
- Partner with technical teams to ensure identity and access management, MFA, and least-privilege principles are applied correctly.
- Contribute to audit readiness and help respond to customer and vendor compliance inquiries.
Benefits
- Equity, if applicable.
- Bonus, if applicable.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
Job Search Resources
Career Resources
Build a Resume for Risk Analyst
The resume builder that gets results.
- Get clear feedback so you look as qualified as you are
- Align your resume with the job to get further in the process, faster
- Take the guesswork out of resume writing
