[Hiring] Senior GRC Analyst @Endsight

Role Description

Endsight is looking for a Senior Compliance & Governance Analyst to help clients navigate cybersecurity compliance, governance, and risk management with clarity and structure. This role serves as a primary security and compliance point of contact for Endsight clients, especially MSSP clients with elevated compliance needs. It also supports Endsight's internal governance and data protection efforts.

This is a client-facing advisory, coordination, and implementation role. Endsight is not an auditing firm and does not perform formal audits. Instead, this position helps clients prepare for, understand, and manage compliance efforts across frameworks such as CMMC, ISO 27001, HIPAA, SOC 2, CIS, and NIST.

The ideal candidate is organized, highly communicative, strong in technical writing, comfortable managing multiple stakeholders, and able to translate complex compliance requirements into practical next steps.

Qualifications

• Bachelor's degree and 6+ years of relevant experience, or 10+ years of IT, cybersecurity, compliance, or governance experience in lieu of a degree.
• Experience advising clients or internal stakeholders on security governance, compliance readiness, and risk management.
• Working knowledge of compliance and security frameworks such as NIST, CIS Controls, SOC 2, ISO 27001, HIPAA, and/or CMMC.
• Minimum 2 years of experience with Microsoft Purview, including data governance, sensitivity labeling, information protection, or related Microsoft 365 compliance capabilities.
• SC-401 passed within three months of hire or previously attained. Endsight will pay for training and exams if not previously completed.
• CCP certification within six months of hire or previously attained. Endsight will pay for training and exams if not previously completed.
• Strong technical writing skills, including the ability to create policies, security program documentation, status reports, and executive/client-facing communications.
• Excellent communication, organization, collaboration, and follow-through.
• Ability to manage competing demands across clients, internal teams, and leadership priorities.
• Strong attention to detail.
• Ability to work independently in a remote environment.
• Self-motivated, proactive, and comfortable moving work forward without constant direction.
• U.S. citizenship.

Requirements

• Current CCP and Microsoft SC-401 certification.
• CISA, CISM, CISSP, or similar governance, risk, compliance, or security certification.
• Experience in an MSP, MSSP, consulting, or client-facing security services environment.
• Experience supporting clients through CMMC, ISO 27001, HIPAA, SOC 2, or other regulated compliance efforts.
• Familiarity with security QBRs, client roadmaps, compliance reporting, and executive-level risk communication.
• Ability to turn complex requirements into practical plans, visuals, summaries, and client-ready explanations.
• Strong analytical and problem-solving skills.
• Genuine curiosity for cybersecurity, governance, and continuous improvement.

Benefits

• Medical: Company pays 100% of the base plan for the employee and family.
• Dental & Vision.
• 401(k) with employer matching.
• Accrued Paid Time Off.
• 9 Paid Holidays.
• Career Pathing.