Job Description

CrowdStrike is hiring a Cybersecurity GRC Analyst to support enterprise governance, risk management, and compliance operations across cybersecurity and cloud environments.

The role focuses on identifying security risks, ensuring compliance with regulatory standards, conducting audits, and improving the organization’s security governance framework.

The analyst works closely with cybersecurity teams, IT departments, auditors, and business stakeholders to strengthen security controls and maintain compliance across enterprise systems.

Key Responsibilities

• Conduct cybersecurity risk assessments and gap analysis
• Develop and maintain GRC policies, standards, and procedures
• Monitor compliance with security frameworks and regulations
• Support internal and external security audits
• Track remediation activities for identified security risks
• Review and document security controls
• Assist with third-party/vendor risk assessments
• Prepare compliance reports and audit evidence
• Collaborate with security, legal, and IT teams
• Support compliance initiatives related to:
  • NIST
  • ISO 27001
  • SOC 2
  • PCI-DSS
  • HIPAA
  • GDPR

Required Skills

• Governance, Risk & Compliance (GRC)
• Cybersecurity fundamentals
• Risk assessment and audit management
• Security documentation and reporting
• Compliance management
• Familiarity with:
  • ServiceNow GRC
  • RSA Archer
  • Splunk
  • Microsoft Purview
  • OneTrust
  • Power BI

Qualifications

• Bachelor’s degree in:
  • Cybersecurity
  • Information Technology
  • Computer Science
  • Information Security
• 2–5 years of experience in:
  • GRC
  • Cybersecurity
  • IT Audit
  • Risk Management
• Preferred Certifications:
  • Security+
  • CISA
  • CRISC
  • CISSP
  • ISO 27001 Lead Auditor

Career Growth

Possible future roles:

• Senior Cybersecurity GRC Analyst
• GRC Consultant
• Security Compliance Manager
• Cyber Risk Manager
• Cloud Security Governance Lead
• Chief Information Security Officer (CISO)