{"id":2768524,"url":"https://alion.io/job/optiv-grc-analyst-remote-usa","title":"GRC Analyst | Remote, USA","company":{"id":58723,"name":"Optiv","domain":"optiv.com","url":"https://alion.io/company/optiv","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":95,"open_postings":10,"ghost_share":0,"stale_share":0.4,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Legal","role_family":"Legal","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Overland Park, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":215000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":165},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-16T00:00:00Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-18T07:59:36Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"This position will be fully remote and can be hired anywhere in the continental U.S.\nThe GRC Analyst delivers recurring governance, risk, and compliance operational support within a managed-services environment. The role performs access reporting, account reconciliation, activity and audit-trail review, evidence handling, compliance tracking, audit support, and GRC and third-party risk workflow administration using approved systems, procedures, and review criteria.\nThis is a client-dedicated role assigned to support designated managed-services clients and their defined GRC service requirements. The role works in client-owned or client-approved systems during applicable client-aligned service windows established for assigned engagements.\nThis is an operational GRC delivery role accountable for accurate, timely, and traceable execution of assigned activities. The analyst supports control owners, risk owners, auditors, and service leadership while escalating exceptions and decisions outside assigned authority.\nHow you’ll make an impact\nAccess, Account & Permissions Governance\nGenerate user access and permissions reports using approved systems, report parameters, and procedures.\nReconcile non-user and inactive accounts across in-scope systems; document discrepancies and route exceptions for review and resolution.\nMaintain records related to staffing, assigned duties, access, and changes that affect required access or control reviews.\nSupport elevated-access reviews and exception handling by collecting records, maintaining status, updating approved risk register or exception records, and escalating unresolved items.\nSystem Activity, Audit Trail & Evidence Review\nReview system activity logs and audit trails according to defined review criteria and schedules; document the review performed and route identified exceptions.\nArchive, organize, and review security- and audit-related email reports and associated records in approved repositories.\nCheck assigned evidence for completeness, accuracy, applicable period, source, and retrievability before routing it for review.\nMaintain traceable records of source, review status, disposition, owner, exception, escalation, and completion date.\nCompliance & Audit Support\nComplete compliance forms, review trackers, attestations, and supporting records using approved source information.\nAssist in preparing audit reports and supporting evidence needed for regulatory and other assigned reviews.\nPerform accuracy, completeness, consistency, and traceability checks before routing deliverables for review or submission.\nRespond to assigned evidence or information requests within established priorities; document completion, dependencies, and exceptions.\nGRC & Third-Party Risk Workflow Support\nManage report queues and request tracking for GRC and third-party risk workflows using approved systems and procedures.\nRecord request scope, ownership, status, due dates, dependencies, disposition, and supporting documentation accurately and consistently.\nMonitor aging items, follow up for missing information, and escalate blockers, overdue requests, or matters outside assigned authority.\nCoordinate with stakeholders to clarify requests and support timely completion without independently performing a third-party risk assessment, approving a third party, or accepting risk unless specifically delegated.\nService Delivery, Quality & Information Handling\nPerform assigned work using client-owned or client-approved systems and platforms during applicable client-aligned service windows.\nFollow approved procedures, access restrictions, data-handling requirements, naming conventions, and evidence-retention practices.\nProtect confidential, security-sensitive, employee, and access-related information and immediately escalate suspected handling or access issues.\nPrepare status and operational metrics for assigned work, including timeliness, aging, completion, exceptions, and quality.\nIdentify recurring process or data-quality issues and recommend procedure clarifications without changing approved controls or processes without authorization.\nDecision Authority & Accountability\nExecute assigned GRC activities within documented procedures, approved access, defined review criteria, and established service priorities.\nMake routine record-maintenance, queue-management, and evidence-organization decisions that comply with approved standards.\nDo not independently approve access or third parties, accept risk, interpret legal or regulatory requirements, design controls, determine control effectiveness, approve control exceptions, or make material process changes unless specifically delegated.\nEscalate suspected control failures, anomalous activity, unresolved reconciliation issues, missing audit evidence, access concerns, overdue work, and decisions outside assigned authority.\nCore Competencies\nAccess reporting, account reconciliation, elevated-access review support, and exception tracking\nSystem activity, audit-trail, and security-report review using defined criteria\nEvidence quality, organization, retention, and traceability\nCompliance-form, review-tracker, audit-report, and request-queue administration\nData reconciliation, aging analysis, discrepancy identification, and operational reporting\nConfidential information handling, escalation, and professional judgment\nClear written communication, follow-through, and stakeholder coordination\nWhat we’re looking for\nAt least 2 years of relevant experience in GRC, audit support, access governance, compliance operations, cybersecurity, risk management, third-party risk operations, or a related control function.\nWorking knowledge of access governance, account status and ownership, elevated access, exception handling, evidence quality, record retention, and escalation practices.\nFamiliarity with foundational audit and compliance concepts, including source evidence, review criteria, populations, findings, management responses, and remediation records.\nDemonstrated ability to review structured records, reconcile data across systems, identify discrepancies, maintain evidence, and follow defined procedures.\nProficiency with spreadsheet analysis and reporting, including filtering, lookups, reconciliation, and pivot tables, plus experience with workflow systems, email-based reports, and document repositories.\nAbility to manage recurring and request-driven work, meet deadlines, maintain accurate trackers, and escalate exceptions promptly.\nAbility to handle confidential and security-sensitive information with discretion and comply with applicable access, privacy, and data-handling requirements.\nAbility to communicate clearly with technical and nontechnical stakeholders and document work so that it is reviewable and auditable.\nBachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or an equivalent combination of education, training, certifications, military service, and relevant practical experience.\nExperience with access reporting, elevated-access reviews, inactive-account reconciliation, review trackers, evidence repositories, and exception records.\nExperience preparing audit evidence, compliance reports, or regulatory support materials under established review criteria.\nExperience supporting GRC or third-party risk workflows in a managed-services environment.\nExperience with spreadsheet, workflow, document-repository, GRC, or identity-governance platforms.\nFamiliarity with recognized frameworks or assurance models such as NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or applicable regulatory requirements.\nRelevant training or certification such as Security+, CISA, CRISC, CGRC, or comparable coursework (preferred).\n\nWhat you can expect from Optiv\nA company committed to our inclusive value through our Employee Resource Groups\nWork/life balance\nProfessional training resources\nCreative problem-solving and the ability to tackle unique, complex projects\nVolunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.\nThe ability and technology necessary to productively work remotely/from home (where applicable)\nEEO Statement\nOptiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.\nOptiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.","description_format":"text","description_chars":9204,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Managed Security","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-17T05:11:36Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":17,"reasons":["conf:0","velocity","win:early","comp:junior"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/optiv-grc-analyst-remote-usa","json_url":"https://alion.io/job/optiv-grc-analyst-remote-usa.json","meta":{"generated_at":"2026-10-18T08:47:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13067,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58723},"rest":"https://alion.io/mcp/rest/get_company?id=58723"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foptiv-grc-analyst-remote-usa"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foptiv-grc-analyst-remote-usa"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foptiv-grc-analyst-remote-usa"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/optiv-grc-analyst-remote-usa\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foptiv-grc-analyst-remote-usa"}]}