GRC Analyst

At Coretelligent, we take ownership of the technology our clients rely on every day.

We partner with growing, highly regulated organizations that need secure, dependable IT environments built to scale. Our role goes beyond support. We bring structure, clarity, and accountability to complex technology landscapes so leaders can move forward with confidence.

Over the past several years, Coretelligent has entered a new chapter. We have strengthened our leadership team, modernized our service delivery, and sharpened our focus on long-term client outcomes. Our work spans managed IT, cybersecurity, cloud, and strategy, delivered through a model designed for consistency, transparency, and trust.

We are building a team of professionals who care deeply about quality, ownership, and continuous improvement. If you value clear expectations, thoughtful collaboration, and work that genuinely matters to the businesses you support, you will feel at home here

Coretelligent is seeking a diligent GRC Analyst to join our team. This role will serve as a key contributor to Coretelligent's holistic cybersecurity solutions by managing critical security awareness programs, conducting vendor risk assessments, and maintaining controls frameworks. This position requires both technical proficiency in security platforms and the analytical skills to assess and document client security postures across multiple environments. The successful candidate will work with clients and Coretelligent staff to support governance, risk, and compliance programs and ongoing security awareness initiatives and third-party risk management activities.

• →Assist vCISO staff with client cybersecurity & governance program management
• →Update policies to ensure alignment with client practices
• →Conduct comprehensive vendor risk assessments and manage vendor risk monitoring programs
• →Collaborate with multiple departments to complete security and compliance due diligence questionnaires on behalf of clients, ensuring accurate and timely responses
• →Manage and administer security awareness training and phishing simulation campaigns, including content deployment, user enrollment, and progress tracking
• →Collect evidence for frameworks and regulations.
• →Manage, coordinate, and track client projects and security-related audits
• →Prepare detailed reports on security and governance activities, findings, and risk assessments

• Experience: 3+ years in a GRC role focused on IT or cybersecurity controls, and/or 3+ years in an IT role with cybersecurity focus.
• Excellent analytical, organizational, and problem-solving skills
• Past experience at a Managed Services Provider.
• Strong written and verbal communication skills
• Comfortable working with various technical tools to gather information on systems and settings
• Detail-oriented with a commitment to accuracy and meeting deadlines
• Ability to manage multiple projects simultaneously while maintaining quality standards
• High personal and professional ethical standards

• Cybersecurity / Compliance certifications (CompTIA Security+, CGRC, CRISC, CISSP, CISA, etc.)
• Hands-on experience with GRC platforms, security awareness training tools, and phishing simulation platforms.
• Familiarity with regulations pertaining to the financial services or biotech verticals, including SEC, SOX, and HIPAA.
• Experience with vendor management platforms and third-party risk assessment methodologies.

Salary Range for this position (depending upon experience): 

$70,000-$88,000

This range reflects the minimum and maximum targets for new hires across all US locations (with the exception of MA, NY, and CA). Within the range, individual pay is determined by job-related skills, experience, work location, and relevant education or training.

We take Coretelligent culture very seriously! As a company, we constantly think of ways to give back to our valued employees through company engagement. We offer a competitive salary, amazing benefits, a great vacation package, a healthy work-life balance, and opportunities to grow your career from within!  

As Coretelligent is a remote company hiring candidates, our perks and benefits packages may adjust based on your location. Direct applicants only; no recruitment agencies or third-party recruiters, please.