[Hiring] Entry Level GRC Analyst @Hotman Group

Role Description

Hotman Group is a boutique cybersecurity and GRC consulting firm doing meaningful work for clients who need GRC done right ranging from Fortune 1000 companies to high-growth startups. We are looking for a driven, detail-obsessed early-career professional who is ready to apply your professional foundation to real GRC consulting work and contribute to real client work from day one. This is a full-time, remote, contract-to-hire position. Top performers move into permanent roles within 6 months.

What You Will Do

• Assess and improve client security and IT controls
• Develop policies, processes, and risk assessments aligned to top frameworks including NIST, ISO 27001, and SOC 2
• Crosswalk and harmonize controls across multiple compliance frameworks
• Document security requirements, support control implementation, and help track remediation progress
• Build risk registers, support assessments, and monitor remediation progress
• Work hands-on with GRC tools and contribute to solutions for complex client challenges
• Translate technical and regulatory requirements into clear, actionable steps for our clients
• Participate in peer review of deliverables before they go to clients

Qualifications

• A Bachelor's or Graduate degree in Cybersecurity, Information Systems, or a related field
• 1 to 2 years of professional work experience in a professional office or corporate environment
• Solid understanding of fundamental security and IT concepts including access controls, data retention, and change management
• Familiarity with major security and privacy frameworks including ISO, NIST, SOC 2, and HIPAA
• Strong critical thinking, organization, and communication skills
• Ability to balance multiple projects and deadlines with exceptional follow-through
• Technical aptitude and a curiosity for learning new tools
• A genuine interest in cybersecurity and a commitment to helping organizations build stronger, safer programs
• A solutions-first attitude with curiosity and energy
• The ability to think critically and execute with precision in a fast-paced, high-trust, low-ego environment
• A high level of ownership and accountability
• A default toward communication
• Active pursuit of a relevant certification (Security+, CC, SSCP) is strongly preferred

Requirements

• Located in the USA with permanent work authorization (no sponsorship of any kind now or in the future)
• Able to pass a background check
• A private, dedicated workspace with a door

Benefits

• Work alongside people who care about the craft and push each other to do better
• Touch more GRC frameworks, more industries, and more client situations in one year than most practitioners see in five
• Your work will be noticed by clients; you are not a number on a headcount
• Opportunity to do real GRC work and improve every day

Company Description

At Hotman Group, we are not just another consulting firm. You will work with a team that holds itself to a high standard.