Job Description

Your Next Career Move Starts Here! 

The Role: Senior Information Security GRC Analyst

Location: Durham, NC – in office Tuesday - Thursday

Type: Contract

What You’ll Do: 

The Senior Information Security GRC Analyst supports and advances the organization’s information security governance, risk management, and compliance program. This role is responsible for performing complex risk assessments, supporting regulatory and customer assurance activities, maintaining risk and compliance documentation, tracking remediation, and partnering with business, technology, privacy, legal, quality, procurement, and audit stakeholders to ensure information security risks are identified, documented, communicated, and managed in alignment with business objectives and risk appetite.

Required Qualifications:

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Business, Risk Management, or a related field, or equivalent professional experience.
• 5+ years of experience in information security, cybersecurity risk management, IT audit, compliance, governance, or a related GRC role.
• Experience performing information security risk assessments, control reviews, audit support, compliance assessments, and remediation tracking.
• Strong working knowledge of information security and risk management frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, NIST 800-53, ISO 31000, COBIT, ITIL, and related control frameworks.
• Familiarity with privacy, regulatory, contractual, and customer assurance requirements such as GDPR, SOC 2, and other applicable obligations.
• Experience supporting customer security questionnaires, RFIs, supplier risk assessments, policy governance, audit evidence collection, and risk reporting.
• Experience with GRC, Integrated Risk Management, ticketing, workflow, dashboarding, or evidence management tools is preferred.
• Professional certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or equivalent are preferred.
• Strong understanding of cybersecurity principles, risk management practices, compliance programs, control design, control testing, and audit readiness.
• Ability to assess risk severity and business impact using multiple sources of information, including assessment results, audit findings, vulnerability data, business context, and control effectiveness.
• Excellent written and verbal communication skills, with the ability to explain technical, risk, and compliance topics to both technical and non-technical stakeholders.
• Strong analytical, problem-solving, prioritization, and decision-making capabilities.
• Ability to manage multiple assignments, deadlines, stakeholders, and competing priorities with limited supervision.
• Demonstrated ability to influence stakeholders, drive accountability, and support timely remediation of risks and control gaps.
• Strong attention to detail and ability to produce clear, accurate, and audit-ready documentation.
• Commitment to delivering practical, business-aligned security guidance and high-quality stakeholder service.

Why Golden Technology? 

Founded in 1997, Golden Technology has grown from a two-person vision into a trusted partner for Fortune 500 clients nationwide. Along the way, we’ve built a culture centered on family, professional growth, and giving back to our communities through our Golden Community initiatives. 

Here’s what sets us apart: 

• Family-first culture that values balance and support. 

• Career development through mentorship, opportunities, and investment in our people. 

• Community impact by dedicating time, talent, and resources to the places we live and work. 

What’s In It for You 

• Exciting opportunities with innovative companies. 

• Guidance from a recruiting team with decades of experience. 

• A professional, supportive culture built on trust and collaboration. 

Ready to take the next step? 
Apply today and let’s build your brighter future together.