{"id":2212160,"url":"https://alion.io/job/hotman-group-experienced-or-senior-grc-analyst-2","title":"Experienced or Senior GRC Analyst","company":{"id":3906107,"name":"Hotman Group","domain":"hotmangroup.com","url":"https://alion.io/company/hotman-group","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Fort Worth, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":117000,"max_usd":211000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-21T23:08:26Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-11-06T03:51:18Z","board_verified":true,"closed_at":null,"days_open":45,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":45},"description":"About the Role\nHotman Group is a boutique cybersecurity and GRC consulting firm doing meaningful work for clients who need GRC done right ranging from Fortune 1000 companies to high-growth startups. We are looking for an experienced GRC practitioner who is ready to work directly with clients, own deliverables end to end, and contribute to a team that holds itself to a high standard. This is not an entry point. We expect you to bring your expertise and use it.\nThis is a full-time, remote, contract-to-hire position. Top performers move into permanent roles within 6 months.\nWhat You Will Do\nAs an Experienced or Senior GRC Analyst at Hotman Group you will work directly with clients to help them build, mature, and sustain their cybersecurity and compliance programs. This is active delivery work. You will:\nLead assessments and audits of security and IT control environments \nDesign, implement, and mature cybersecurity and compliance programs \nDevelop risk registers, conduct risk assessments, and track remediation efforts \nCreate and refine policies, standards, and procedures aligned with top frameworks including SOC 2, ISO 27001, NIST CSF, HIPAA, HITRUST, CMMC, and others \nPrepare clients for internal audits and external assessments \nTranslate technical, regulatory, and business requirements into clear, actionable deliverables for client stakeholders \nCommunicate findings, manage client feedback, and drive outcomes even when stakeholders push back \nMentor junior analysts and contribute to the growth of our GRC practice \nParticipate in peer review of deliverables before they go to clients - your work will be reviewed and you will review others \nYou will work across multiple industries on diverse engagements. No two projects are the same and no day looks exactly like the last.\nWhat You Bring\nHands-on GRC experience with a track record of owning deliverables, producing frameworks-based documentation, and driving remediation -- not just supporting programs from the inside \nDeep working knowledge of compliance standards including SOC 2, ISO 27001, NIST CSF, HIPAA, and HITRUST \nExperience communicating findings and recommendations directly to clients or senior internal stakeholders -- you can hold a room, manage pushback, and present complex findings in plain language \nExcellent writing skills -- your deliverables are clear, polished, and do not require heavy editing before they go to a client \nStrong critical thinking and professional judgment -- you know when to escalate, when to hold your position, and when to ask for help \nA high level of accountability and ownership -- you manage your own workload, communicate proactively, and hold yourself to deadlines without being managed closely \nComfort working independently in a fully remote environment with minimal hand-holding \nA default toward communication - you keep the team informed, you acknowledge quickly, and you do not go dark on a deliverable or a client \nActive certifications such as CISA, CISM, CISSP, or CRISC are strongly preferred. If you do not currently hold a relevant certification, we expect you to be actively pursuing one.\nThis role requires direct accountability for work product and outcomes. If your experience has been primarily internal, supporting programs from the inside without stakeholder-facing delivery responsibility, this role will be a significant adjustment.\nRequirements\nPermanent authorization to work in the U.S. -- no sponsorship of any kind now or in the future \nAble to pass a background check \nReliable high-speed internet and a secure, private remote workspace \nOur Hiring Process\nOur process is designed to be straightforward but rigorous. In addition to a written questionnaire and video responses, finalists will complete a practical skills assessment before advancing to a panel interview with our delivery team. The assessment reflects the type of work you will do on day one. If you are confident in your GRC expertise, this is your opportunity to show it.\nWhy Hotman Group\nAt Hotman Group we are not just another consulting firm. You will work alongside people who care about the craft and push each other to do better. No politics, no silos, no hierarchy between you and the people making decisions.\nYou will touch more GRC frameworks, more industries, and more client situations in one year here than most practitioners see in five. You will grow because the work demands it.\nThe clients you serve will actually notice your work. You are not a number on a headcount. Your name is on the deliverable.\nIf you want to do real GRC work, get better at it every day, and work with a team that holds itself to a high standard - this is the place.\nNo phone calls or emails please.","description_format":"text","description_chars":4713,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-10T03:42:00Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.375,"p_room":0.35,"age_days":45,"expected_fill_days":7,"reasons":["conf:2","win:tail"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/hotman-group-experienced-or-senior-grc-analyst-2","json_url":"https://alion.io/job/hotman-group-experienced-or-senior-grc-analyst-2.json","meta":{"generated_at":"2026-11-06T07:47:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13895,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3906107},"rest":"https://alion.io/mcp/rest/get_company?id=3906107"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhotman-group-experienced-or-senior-grc-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhotman-group-experienced-or-senior-grc-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhotman-group-experienced-or-senior-grc-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hotman-group-experienced-or-senior-grc-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhotman-group-experienced-or-senior-grc-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2212160}},{"tool":"search_jobs","arguments":{"company":"hotmangroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2212160},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}