{"id":2212162,"url":"https://alion.io/job/hotman-group-entry-level-grc-analyst","title":"Entry Level GRC Analyst","company":{"id":3906107,"name":"Hotman Group","domain":"hotmangroup.com","url":"https://alion.io/company/hotman-group","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Fort Worth, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":155000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":52},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-10T18:16:52Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-13T13:52:33Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"About the Role\nHotman Group is a boutique cybersecurity and GRC consulting firm doing meaningful work for clients who need GRC done right ranging from Fortune 1000 companies to high-growth startups. We are looking for a driven, detail-obsessed early-career professional who is ready to apply your professional foundation to real GRC consulting work and contribute to real client work from day one.\nThis is a full-time, remote, contract-to-hire position. Top performers move into permanent roles within 6 months.\nWhat You Will Do\nAs an Entry Level GRC Analyst at Hotman Group you will work side by side with senior team members and partners to help our clients strengthen their cybersecurity and compliance programs. You will:\nAssess and improve client security and IT controls \nDevelop policies, processes, and risk assessments aligned to top frameworks including NIST, ISO 27001, and SOC 2 \nCrosswalk and harmonize controls across multiple compliance frameworks \nDocument security requirements, support control implementation, and help track remediation progress \nBuild risk registers, support assessments, and monitor remediation progress \nWork hands-on with GRC tools and contribute to solutions for complex client challenges \nTranslate technical and regulatory requirements into clear, actionable steps for our clients \nParticipate in peer review of deliverables before they go to clients - your work will be reviewed and you will review others \nYou will touch every aspect of cybersecurity and GRC work across multiple industries. Every engagement brings new challenges and new opportunities to grow.\nWhat You Bring\nA Bachelor's or Graduate degree in Cybersecurity, Information Systems, or a related field \n1 to 2 years of professional work experience -- this does not need to be in GRC or cybersecurity specifically, but it does need to be in a professional office or corporate environment. We are looking for candidates who have demonstrated reliability, communication, and accountability in a workplace setting \nSolid understanding of fundamental security and IT concepts including access controls, data retention, and change management \nFamiliarity with major security and privacy frameworks including ISO, NIST, SOC 2, and HIPAA \nStrong critical thinking, organization, and communication skills \nAbility to balance multiple projects and deadlines with exceptional follow-through \nTechnical aptitude -- you are curious, you learn fast, and you do not shy away from new tools \nA genuine interest in cybersecurity and a commitment to helping organizations build stronger, safer programs \nA solutions-first attitude -- you show up with curiosity and energy and you are not afraid to dive into the work \nThe ability to think critically and execute with precision in a fast-paced, high-trust, low-ego environment \nA high level of ownership and accountability -- you communicate proactively and follow through without being managed closely \nA default toward communication - you keep the team informed, you acknowledge quickly, and you do not go dark on a deliverable or a client \nActive pursuit of a relevant certification (Security+, CC, SSCP) is strongly preferred. If you are not currently studying for one, be prepared to explain why.\nRequirements\nLocated in the USA with permanent work authorization (no sponsorship of any kind now or in the future)\nAble to pass a background check \nA private, dedicated workspace with a door - client calls and confidential work require it\nOur Hiring Process\nOur process is designed to be straightforward but thorough. In addition to a written questionnaire and video responses, finalists will complete a practical skills assessment before advancing to a panel interview with our delivery team. The assessment is designed to reflect real GRC work. If you are serious about building a career in this field, it is your opportunity to show us what you can do.\nWhy Hotman Group\nAt Hotman Group we are not just another consulting firm. You will work alongside people who care about the craft and push each other to do better. No politics, no silos, no hierarchy between you and the people making decisions.\nYou will touch more GRC frameworks, more industries, and more client situations in one year here than most practitioners see in five. You will grow because the work demands it.\nThe clients you serve will actually notice your work. You are not a number on a headcount. Your name is on the deliverable.\nIf you want to do real GRC work, get better at it every day, and work with a team that holds itself to a high standard - this is the place.\nNo phone calls or emails please.","description_format":"text","description_chars":4617,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-10T03:42:00Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.335,"p_room":0.35,"age_days":32,"expected_fill_days":7,"reasons":["conf:0","win:tail","comp:junior"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/hotman-group-entry-level-grc-analyst","json_url":"https://alion.io/job/hotman-group-entry-level-grc-analyst.json","meta":{"generated_at":"2026-10-13T15:06:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23146,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3906107},"rest":"https://alion.io/mcp/rest/get_company?id=3906107"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhotman-group-entry-level-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhotman-group-entry-level-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhotman-group-entry-level-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hotman-group-entry-level-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhotman-group-entry-level-grc-analyst"}]}