[Hiring] Senior GRC Analyst @Deltek

Role Description

As a Senior GRC Analyst, you will support assessment, audit readiness, cloud security compliance, risk management, & security tooling across SaaS/cloud environments. You ensure controls are documented, measurable, continuously monitored, & aligned with applicable frameworks, laws, & regulations. This role supports customer trust by delivering clear evidence, accurate reporting, & well-managed remediation across Engineering, Product, & IT.

• Priorities:
  • Audit readiness & evidence delivery
  • Control documentation, continuous monitoring
  • Risk/PoA&M reporting, assigned deliverables end-to-end & coordinating inputs from Engineering, Product, & IT
• Audit & frameworks:
  • Lead or support audits & assessments for cloud SaaS applications across frameworks such as SOC 1, SOC 2, NIST 800-53, NIST 800-171, CMMC, ISO, FedRAMP, PCI DSS, CIS, CSA CCM, & other security or regulatory standards/frameworks.
  • Manage scoping, evidence requests, control testing, issue tracking, remediation follow-up, & final report support.
  • Assess & communicate administrative, technical, & security controls across OCI, AWS, Azure, & related cloud services.
  • Apply project management practices to plan, track, & deliver assessments, including use of Jira for epics, stories, backlog management, & stakeholder reporting.
  • Use automation & AI responsibly to streamline evidence collection, control mapping, & recurring reporting, with appropriate human review.
• Reporting & continuous improvement:
  • Build & maintain GRC metrics & dashboards for reporting.
  • Present trends, risks, remediation status, & control health to leadership.
  • Draft & maintain security policies, standards, System Security Plans, control narratives, implementation details, & evidence references.
  • Produce high-quality audit deliverables, including narratives, evidence packages, status reports, & remediation updates.
  • Manage risk register items & PoA&Ms from identification through closure, including control gap analysis, remediation planning, owner coordination, & progress tracking.
  • Translate control requirements & regulatory obligations into clear, testable expectations for technical teams.
• Program ownership & documentation:
  • Own or backup for key GRC programs by maintaining procedures, SLAs, & artifacts for audits & customer requests (e.g., policy management & security due diligence questionnaires to support RFIs & RFPs).
  • Actively participate in initiatives aimed at enhancing team processes & procedures.
  • Help maintain & curate annual compliance training content & improve training process.
  • Interpret control requirements & regulatory obligations accurately, & translate them into clear, testable expectations for technical teams.
  • Participate in incident response reviews & RCAs by documenting control failures, corrective actions, & follow-up evidence for closure.

Qualifications

• B.S. degree (Information Security, Computer Science, MIS, or equivalent program preferred) from an accredited college/university.
• 3+ years supporting audits & compliance work across common frameworks.
• Minimum 3 years of combined experience with implementing and/or assessing: IT audit, IT risk management, Cloud security & compliance, internal audit function, Information Technology General Controls (ITGC), Information security operations.
• Experience supporting government-related compliance efforts (e.g., FedRAMP- or DoD-aligned expectations) within cloud environments.
• Hold (or be actively pursuing) relevant certifications such as CISA, CISSP, CCSK/CCAK, or major cloud security certifications (Azure/AWS/GCP), with active status preferred.

Requirements

• Independently lead audit workstreams, driving stakeholder follow-through, & owning evidence/control documentation through completion.
• Demonstrate strong analytical & critical-thinking skills with business & technical acumen.
• Communicate clearly in writing, verbally & collaborate effectively with diverse stakeholders.
• Manage time effectively across multiple priorities & concurrent projects.
• Thrives in a fast-paced, collaborative environment & contribute to shared outcomes.
• Continuously learn through structured, on-the-job, & self-directed development.

Benefits

• Healthcare benefits
• 401(k) plan and company match
• Paid vacation time and holidays
• Well-living programs
• Short-term and long-term disability coverage
• Basic life insurance
• Tuition reimbursement