IT Security GRC Analyst (Compliance Framework Focus)

Insight Global is seeking an Analyst, IT Security GRC for a top industrial services and equipment rental client. This opportunity is heavily focused on cybersecurity compliance frameworks and governance maturity, with a primary emphasis on ISO 27001 implementation and alignment activities. The ideal candidate will assist with building a new GRC platform, supporting audits, managing compliance documentation, conducting risk assessments, and helping establish policies and procedures from the ground up. This is an excellent opportunity for someone looking to gain hands-on experience building a mature governance program while helping shape the future security culture of a growing cybersecurity organization. This is a 3-6 month contract to hire role, hybrid in Charlotte NC.
Top Initiatives:
• Build out a brand-new GRC platform
• Drive ISO 27001 and compliance framework maturity
• Establish governance processes, policies, and security standards

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• 2–5 years of experience in IT Compliance, Information Security, Risk Management, Audit, or GRC
• Strong knowledge of NIST Cybersecurity Framework (CSF)
• Experience with ISO 27001, NIST 800-53, NIST 800-171, SOC 2, CMMC, and FedRAMP frameworks
• Experience supporting audits, evidence collection, compliance documentation, and control mapping
• Experience conducting cybersecurity risk assessments and remediation tracking
• Strong documentation, communication, and stakeholder management skills
• Experience with GRC or compliance management platforms
• Ability to work cross-functionally with technical and business teams

• Security+, CGRC, CISA, CRISC, CISSP, or ISO 27001 Lead Implementer certification
• SOX and ITGC experience
• Experience implementing or building a GRC platform
• Experience creating governance policies and procedures
Bachelor's degree in a related field

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.