1

Grc Risk Analyst Jobs in Michigan (NOW HIRING)

... Risk, and Compliance (GRC) o Cloud and hosted applications o Containerization o Application ... o Malware analysis/forensic system analysis o Incident response and remediation o Penetration ...

SOC Analyst * Threat hunting * Detection engineering * Network Security engineering Experience in ... Governance, Risk, and Compliance (GRC) * Cloud and hosted applications * Containerization o ...

Support the management of Governance, Risk and Compliance ("GRC") system maintenance and usage ... Good knowledge of Microsoft Office Suite, GRC technologies, and data analysis tools * Extensive ...

Vice President of Cybersecurity

Detroit, MI · On-site

$155K - $194K/yr

... risk, posture, and resilience • Advise executive leadership and the board on cybersecurity ... analysis • Ensure cybersecurity is embedded across product, infrastructure, and program ...

SOC Analyst * Threat hunting * Detection engineering * Network Security engineering * Experience in ... Governance, Risk, and Compliance (GRC) * Cloud and hosted applications o Containerization

SOC Analyst * Threat hunting * Detection engineering * Network Security engineering * Experience in ... Governance, Risk, and Compliance (GRC) * Cloud and hosted applications o Containerization

... • Analyze root cause of issues, provide recommendations for process improvements and risk ... GRC tools to effectively manage assessment remediation plans and documentation • Serve as a ...

Analyze root cause of issues, provide recommendations for process improvements and risk mitigation ... Utilize GRC tools to effectively manage assessment remediation plans and documentation * Serve as a ...

Auditor

Dearborn, MI · On-site

$99K - $166K/yr

Experience with GRC (Governance, Risk, and Compliance) systems and data analytics tools (e.g., ACL, Tableau, Power BI, SQL). * Demonstrated ability to work effectively both independently and as part ...

SOC Analyst * Threat hunting * Detection engineering * Network Security engineering * Experience in ... Governance, Risk, and Compliance (GRC) * Cloud and hosted applications * Containerization

ServiceNow Developer

Detroit, MI · On-site

$85K - $141K/yr

Strong analytical, problem-solving skills. * Ability to work effectively in a team environment ... risk management, etc.), particularly in a federal environment. * Candidates with an ACTIVE "SECRET ...

next page

Showing results 1-20

Grc Risk Analyst information

What is the difference between Grc Risk Analyst vs Compliance Analyst?

AspectGrc Risk AnalystCompliance Analyst
CertificationsISO 31000, FRM, CRISCISO 19600, CCEP, CISA
Work EnvironmentRisk management teams, corporate officesRegulatory departments, corporate offices
Industry UsageFinance, banking, insurance, corporate riskFinancial services, healthcare, manufacturing
Job FocusIdentifying, assessing, and mitigating risks across enterpriseEnsuring compliance with laws and regulations

While both roles involve regulatory and risk considerations, a Grc Risk Analyst focuses on enterprise-wide risk management strategies, whereas a Compliance Analyst concentrates on adherence to specific laws and regulations. Both roles require similar certifications and often work in overlapping industries, but their core responsibilities differ in scope and focus.

What are GRC Risk Analysts?

GRC Risk Analysts are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization. They assess and manage risks related to business operations, ensure compliance with relevant laws and regulations, and help implement policies and controls to mitigate potential threats. These analysts work closely with management to identify vulnerabilities, develop risk management strategies, and monitor the effectiveness of compliance programs. Their goal is to protect the organization from financial, legal, and reputational harm while supporting business objectives.

What are the key skills and qualifications needed to thrive as a GRC Risk Analyst, and why are they important?

To thrive as a GRC (Governance, Risk, and Compliance) Risk Analyst, you need a solid understanding of risk management principles, regulatory requirements, and compliance frameworks, often supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (such as RSA Archer or MetricStream), risk assessment methodologies, and certifications like CRISC or CISA is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and convey findings to stakeholders. These skills are critical for ensuring organizational compliance, minimizing risk exposure, and supporting informed decision-making.

What are some common challenges a GRC Risk Analyst might face when implementing new risk management frameworks within an organization?

A GRC Risk Analyst often encounters challenges such as resistance to change from stakeholders, integrating new frameworks with existing processes, and ensuring consistent understanding across departments. Aligning risk management practices with organizational goals while adhering to regulatory requirements can also be complex. Success in this role requires strong communication skills, adaptability, and the ability to educate and collaborate with team members from diverse backgrounds.
What job categories do people searching Grc Risk Analyst jobs in Michigan look for? The top searched job categories for Grc Risk Analyst jobs in Michigan are:
What cities in Michigan are hiring for Grc Risk Analyst jobs? Cities in Michigan with the most Grc Risk Analyst job openings:

Cloud Security Architect - Remote US

NextOvation

Detroit, MI • Remote

$80 - $100/hr

Full-time

Posted 25 days ago


Job description

The Security Account Manager (SAM) serves as a trusted security advisor and engagement lead for a portfolio of strategic, high-visibility customers and has a Cloud Based Security Background. This role combines a consulting-style approach with ongoing account security governance. The SAM partners with Sales, Customer Success, Support, Cloud Operations, and Product/Security teams to reduce risk, improve customer security posture, and drive adoption of cloud security best practices.
Key Responsibilities
  • Act as the primary security point of contact for assigned strategic/critical accounts.
  • Build multi-threaded relationships with customer security leadership (CISO org), IT, risk/compliance, and engineering teams.
  • Lead security governance cadences (e.g., monthly/quarterly) including security posture reviews, risk discussions, and roadmap alignment.
  • Conduct discovery to understand customer environments, threat models, regulatory requirements, and business priorities.
  • Advise on cloud security controls and best practices: IAM/SSO/MFA, least privilege, key management/encryption, network segmentation, logging/monitoring, vulnerability management, configuration baselines, and secure SDLC.
  • Partner with internal security specialists to address complex topics (e.g., crypto/KMS/HSM, workload isolation, data residency, Zero Trust
Qualifications
  • Demonstrates strong understanding of cloud architecture (and products – OCI, AWS, Azure, etc.) and can clearly describe components, data flows, trust boundaries, and shared responsibility across IaaS/PaaS/SaaS. Able to translate architecture into security posture implications, risks, and recommended controls for enterprise customers.
  • Background in security consulting (Big5 Type), cloud security architecture, or enterprise risk/GRC for regulated industries
  • Security certifications (one or more): CISSP, CISM, CCSP, GIAC, ISO 27001 LI/LA (as relevant)
  • Experience with complex escalations and cross-functional leadership in matrixed organizations
  • Familiarity with customer security assurance processes (questionnaires, audit requests, pen test coordination, attestations
  • Experience 3-4 years
Salary: $120,000 - $165,000/year
Contract: $80 - $100/hour

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.