GRC Analyst
$90k - $110k+ Performance-based incentives
Junior
Bachelor's
Remote in USA
RemoteMust work standard hours of 8am–5pm Central Time.
CybersecuritySecurity Governance, Risk & Compliance
About the job
Requirements
- A bachelor's degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Accounting, or a related field, or an equivalent combination of education and work experience.
- Two or more years of experience in information security, IT audit, governance, risk and compliance, security compliance, client assurance, or a related discipline.
- Working knowledge of information security and compliance concepts including SOC 2, access management, least privilege, segregation of duties, disaster recovery, data protection, and security testing and controls.
- Experience interpreting questionnaires, gathering information from stakeholders, and preparing accurate and professional responses.
- Strong written communication skills and the ability to explain technical and compliance concepts to technical and non-technical audiences.
- Attention to detail and ability to manage multiple priorities and deadlines simultaneously.
- Strong organizational, documentation, and follow-up skills.
- Initiative, accountability, and willingness to learn new technologies, products, and security requirements.
- Strong analytical and problem-solving skills.
- Ability to manage multiple projects and deadlines in a fast-paced environment.
- Interpersonal and collaboration skills.
- Ability to maintain confidentiality and exercise sound judgment when handling sensitive information.
- Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, and Teams.
- Ability to work independently while effectively partnering across departments.
Responsibilities
- Serve as a primary point of contact for client assurance requests, including security questionnaires, due diligence inquiries, RFP security sections, SOC reports, bridge letters, penetration test summaries, and other security-related documentation.
- Review and respond to detailed client security questionnaires by interpreting requirements and providing accurate, defensible responses aligned with company policies and security practices.
- Partner with Sales, Client Experience, Legal, Product, and Information Security teams to gather information and respond to customer security inquiries within established service-level expectations.
- Use approved security questionnaire and AI-enabled response tools to draft and refine responses while ensuring accuracy, consistency, and appropriate disclosure of information.
- Support the development, maintenance, and continuous improvement of reusable security response content and documentation.
- Support internal and external audits, including SOC 2 and other compliance assessments, by coordinating evidence requests and assisting with control documentation.
- Collect, organize, and maintain audit-ready evidence supporting compliance initiatives and recurring review activities.
- Assist with governance, risk, and compliance processes designed to maintain adherence to security frameworks, internal controls, and regulatory requirements.
- Support remediation efforts by tracking action items and partnering with stakeholders to ensure timely resolution of identified issues.
- Own and execute recurring User Access Reviews for critical systems and applications.
- Coordinate with system owners and managers to validate that user access remains appropriate and aligned with least-privilege principles.
- Collect, maintain, and organize evidence supporting access review activities.
- Track remediation actions resulting from access reviews and partner with business and technical stakeholders to resolve identified exceptions.
- Support the review and negotiation of customer security addenda, contract language, and redlined security requirements.
- Partner with Legal and Information Security stakeholders to evaluate proposed contractual obligations and recommend appropriate revisions.
- Provide guidance to internal business teams related to security controls, compliance requirements, and customer assurance requests.
- Identify and implement opportunities to improve processes, documentation, automation, and reporting across the Governance, Risk, and Compliance program.
- Participate in broader governance and risk initiatives as security processes mature and become more automated.
- Contribute to program enhancement efforts that improve operational efficiency, consistency, and customer experience.
- Minimal travel may be required.
Desired Qualifications
- Experience completing customer security questionnaires, due diligence requests, or security sections of RFPs.
- Experience supporting SOC 2 audits, IT audits, or compliance assessments.
- Experience administering access certification or user access review programs.
- Experience reviewing security contract language, security addenda, or contract redlines in partnership with Legal teams.
- Familiarity with GRC and security questionnaire management platforms such as SecurityPal, Archer, OneTrust, MetricStream, or similar tools.
- Background in IT audit, SOC auditing, risk management, compliance, or related disciplines.
- Experience in SaaS, healthcare technology, benefits administration, financial services, or other highly regulated industries.
- Relevant certifications such as CISA, CRISC, Security+, CISSP, or similar credentials.
About the company
bswift provides comprehensive benefits administration and HR payroll services for employers across the United States. It acts as a full-service partner to manage employee benefits programs, from enrollment and ongoing administration to payroll-related tasks. The product offering is delivered through virtual, cloud-based processes and can be charged via subscription-based fees or per-employee-per-month arrangements, with many services accessible remotely to fit virtual work environments. Compared to competitors, bswift emphasizes end-to-end benefits administration, a broad client base (from small businesses to large corporations), and a strong focus on client engagement and thought leadership—hosting virtual events and sharing practical resources to help clients navigate benefits. The company’s goal is to help employers uncover the true value of their benefits programs and administer them smoothly and efficiently, reducing complexity and administrative burden for HR teams.
Company Size
1,001-5,000
Company Stage
Growth Equity (Venture Capital)
Total Funding
$51M
Headquarters
Chicago, Illinois
Founded
1996
Get referred to bswift
See people who can refer or advise you
Simplify's Take
What believers are saying
- February 2026 Emma Chat hit 80% autonomous resolution across 750,000 messages.
- July 2026 AI intake cut implementation timelines up to 40%, accelerating revenue recognition.
- April 2026 USA TODAY named bswift a Top Workplace, supporting hiring and retention.
What critics are saying
- June 2026 reviews allege layoffs, outsourcing, and training failures damaging service quality.
- Francisco Partners owns bswift; exit pressure can force cost cuts before 2027.
- AI automation replacing specialists risks deeper churn if clients reject opaque implementations.
What makes bswift unique
- Emma Intelligence spans enrollment, support, analytics, and implementation across one platform.
- Managed Services lets brokers outsource administration while keeping client ownership and revenue.
- bswift’s AI-native Simplify turns document uploads into near-complete site builds in minutes.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- 401(k) Retirement Plan
- Remote Work Options
- Professional Development Budget
- Mental Health Support
- Employee Wellbeing Initiatives
- Flexible Work Hours