GRC Analyst

Founded in 2006, Coretelligent is a provider of comprehensive managed IT solutions, specializing in areas like cybersecurity, private cloud services, IT planning and strategy, and backup and disaster recovery. We cater to industries such as financial services, life sciences, technology, and professional services. The company has been recognized for its achievements, including being named to Inc. magazine’s Power Partner Awards and as AT&T Cybersecurity North American Partner of the Year for 2023. Coretelligent focuses on meeting regulatory requirements and ensuring clients' IT platforms are robust and compliant. We have a significant presence across various U.S. locations and offer co-managed IT solutions as well.

Job Overview

Coretelligent is seeking a diligent GRC Analyst to join our team. This role will serve as a key contributor to Coretelligent's holistic cybersecurity solutions by managing critical security awareness programs, conducting vendor risk assessments, and maintaining controls frameworks. This position requires both technical proficiency in security platforms and the analytical skills to assess and document client security postures across multiple environments. The successful candidate will work with clients and Coretelligent staff to support governance, risk, and compliance programs and ongoing security awareness initiatives and third-party risk management activities.

Key Responsibilities:

• Assist vCISO staff with client cybersecurity & governance program management
• Update policies to ensure alignment with client practices
• Conduct comprehensive vendor risk assessments and manage vendor risk monitoring programs
• Collaborate with multiple departments to complete security and compliance due diligence questionnaires on behalf of clients, ensuring accurate and timely responses
• Manage and administer security awareness training and phishing simulation campaigns, including content deployment, user enrollment, and progress tracking
• Collect evidence for frameworks and regulations.
• Manage, coordinate, and track client projects and security-related audits
• Prepare detailed reports on security and governance activities, findings, and risk assessments

Required Skills and Qualifications:

• Experience: 3+ years in a GRC role focused on IT or cybersecurity controls, and/or 3+ years in an IT role with cybersecurity focus.
• Excellent analytical, organizational, and problem-solving skills
• Past experience at a Managed Services Provider.
• Strong written and verbal communication skills
• Comfortable working with various technical tools to gather information on systems and settings
• Detail-oriented with a commitment to accuracy and meeting deadlines
• Ability to manage multiple projects simultaneously while maintaining quality standards
• High personal and professional ethical standards

Preferred Skills:

• Cybersecurity / Compliance certifications (CompTIA Security+, CGRC, CRISC, CISSP, CISA, etc.)
• Hands-on experience with GRC platforms, security awareness training tools, and phishing simulation platforms.
• Familiarity with regulations pertaining to the financial services or biotech verticals, including SEC, SOX, and HIPAA.
• Experience with vendor management platforms and third-party risk assessment methodologies.

Salary Range for this position (depending upon experience): 

$70,000-88,000

This range reflects the minimum and maximum targets for new hires across all US locations (with the exception of MA, NY, and CA). Within the range, individual pay is determined by job-related skills, experience, work location, and relevant education or training.

What you’ll love about Coretelligent:

We take Coretelligent culture very seriously! As a company, we constantly think of ways to give back to our valued employees through company engagement. We offer a competitive salary, amazing benefits, a great vacation package, a healthy work-life balance, and opportunities to grow your career from within!  

Benefits: Health, Dental, & Vision, Flexible Spending Account (FSA), 401k, Health Reimbursement Account (HRA), Health Savings Account (HSA), Life Insurance, Disability Insurance, Paid Parental Leave, Holiday Pay, Flexible Vacation & Sick Days.

Perks: Twelve holidays, including a day off on your birthday and work anniversary, flexible vacation, monthly rewards, spot bonuses for demonstrated excellence, community and social events, learning and development, flexible working life, $100 well-being allowance, and other health & wellness perks.

Equal Opportunity and Accessibility Commitment

Coretelligent is an Equal Opportunity employer committed to diversity, equity, and inclusion. We welcome qualified applicants of all races, ethnicities, religions, ages, sexual orientations, gender identities, socioeconomic statuses, and more. Our focus is on creating an inclusive workplace where diversity is valued beyond compliance, ensuring that every team member feels respected, supported, and empowered to be their authentic selves.

In compliance with the Colorado Anti-Discrimination Act (CADA), we do not request or consider age or age-adjacent information (such as graduation dates) during the hiring process. We encourage all qualified individuals to apply, regardless of age.

We extend our dedication to accessibility and inclusivity to our remote workforce. In alignment with the Americans with Disabilities Act (ADA), we are committed to providing reasonable accommodations to enable individuals with disabilities to effectively perform their job duties in a remote setting. Applicants needing accommodations for the application or interview process are encouraged to reach out to [email protected] for necessary arrangements.

E-Verify www.dhs.gov/E-Verify      

For information about the right to work, click here for English or here for Spanish.

E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce. 

As Coretelligent is a remote company hiring candidates, our perks and benefits packages may adjust based on your location. Direct applicants only; no recruitment agencies or third-party recruiters, please.

#LI-Remote