GRC Analyst

A GRC analyst on bswift's Information Security team, handling governance, risk, compliance and client assurance for the benefits administration company and working with sales, client experience, legal and product teams.

Much of the job is answering client security questionnaires, due diligence requests and RFP security sections, using AI-assisted response tools and a shared answer library. The analyst also gathers evidence for SOC 2 and other audits, tracks remediation, runs recurring user access reviews for critical systems, and helps Legal review security terms in customer contracts. bswift wants two or more years in information security, IT audit, GRC or client assurance, working knowledge of SOC 2 and access control concepts, and strong writing. CISA, CRISC or Security+ is a plus. Remote in the US.