[Remote] GRC Analyst

Note: The job is a remote job and is open to candidates in USA. Parallels is a technology company seeking a GRC Analyst to support the maturity of its Governance, Risk, and Compliance program. The role focuses on compliance monitoring, customer security questionnaires and RFPs, third-party risk management, risk register maintenance, policy development, and audits against SOC 2, ISO 27001, and DORA requirements.

Responsibilities

• Monitor organizational compliance with internal policies and external regulations. Track control performance, identify gaps, and prepare regular compliance status reports for leadership
• Respond to customer RFPs and security/vendor questionnaires, coordinating with subject matter experts to ensure accurate and timely responses. Maintain a library of standard responses and supporting evidence
• Support the third-party risk management program, including vendor security assessments, due diligence reviews, and ongoing monitoring of vendor risk. Track vendor remediation items and maintain vendor risk documentation
• Maintain and update the organization's risk register, ensuring all identified risks are documented, assessed, and monitored. Track risk treatment plans and follow up with risk owners on remediation status
• Assist in the development, review, and implementation of GRC policies and procedures. Help ensure policies stay current with regulatory changes and organizational needs, and support employee awareness of policy requirements
• Leads audits and assessments against SOC 2, ISO 27001, and DORA requirements. Assist in evidence collection, control testing, and remediation tracking for audit findings

Skills

• The ideal candidate is experienced in third-party risk management, has worked on RFPs, security questionnaires, is familiar with compliance frameworks such as SOC 2, ISO 27001, and DORA, and is comfortable working cross-functionally with IT, Legal, Product, Security, and HR
• Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience)
• 4+ years of experience in GRC, IT audit, information security, or a related compliance role
• Working knowledge of SOC 2, ISO 27001, and DORA (Digital Operational Resilience Act) requirements
• Experience with risk register tools, Trust Centers, GRC platforms and ticketing systems
• Excellent written communication skills for policy drafting and compliance reporting
• Ability to work independently and manage multiple concurrent reviews and deadlines

Benefits

• We offer a fully remote workspace. There is no pressure to work in an office whatsoever.
• Hours are flexible, too!

Company Overview