ZipRecruiter

Log In

1

Grc Soc Analyst Jobs (NOW HIRING)

Eleven Recruiting

SOC Analyst

... experienced SOC Analyst to join their client, an investment firm. The role involves interacting ... the GRC team to align with GRC controls testing. • Perform other duties as planned.

Eliassen Group

SOC Analyst

Washington, DC · Remote

$50 - $55/hr

Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a SOC Analyst to support ... Exposure to AWS, hybrid architectures, GRC tools such as Xacta, and enterprise platforms such as ...

Medasource

$55 - $80/hr

IT GRC Analyst Remote, USA Compensation: $55 - $80 per hour Contract Length: 6-month Contract to ... SOC 2, and NIST. The role also contributes to business continuity, disaster recovery, and AI ...

Eightelevengroup

$55 - $80/hr

IT GRC Analyst Remote, USA Compensation: $55 - $80 per hour Contract Length: 6-month Contract to ... Familiarity with industry frameworks and standards such as NIST CSF, SOC 2, HIPAA, and CIS

Medasource

WI · On-site

$55 - $80/hr

IT GRC Analyst Remote, USA Compensation: $55 - $80 per hour Contract Length: 6-month Contract to ... SOC 2, and NIST. The role also contributes to business continuity, disaster recovery, and AI ...

Eightelevengroup

WI · On-site

$55 - $80/hr

IT GRC Analyst Remote, USA Compensation: $55 - $80 per hour Contract Length: 6-month Contract to ... Familiarity with industry frameworks and standards such as NIST CSF, SOC 2, HIPAA, and CIS

Gusto, Inc.

Senior GRC Analyst

San Francisco, CA · On-site

$183K - $205K/yr

Proven experience leading or supporting a SOC 2 Type 2 compliance initiative, including ... A data-informed mindset, with the ability to use analytics to assess GRC performance and maturity.

Wolfe, LLC

Senior GRC Analyst

Pittsburgh, PA · On-site

$114K - $163K/yr

Senior GRC Analyst Department: Compliance & Fraud Employment Type: Full Time Location: Pittsburgh ... Run our annual PCI DSS v4.0.1 Level 1 service provider assessment and SOC 2 Type II examination end ...

Tiro Security, LLC

Snr GRC Analyst

California, MO · On-site

$100K - $150K/yr

Overview Our client seeks a Sr. GRC Analyst in Orange County, CA. This is an onsite position ... Experience with ISO 27001 & 27007 and preparation for SOC 2 certification. * Experience with ...

smart folks inc

GRC Analyst

Phoenix, AZ · On-site

Evaluate vendor controls, documentation, and compliance certifications (SOC 2, ISO, GDPR, etc ... Analyze shared responsibility models and identify security gaps. * Review controls across IAM ...

NinjaTrader

GRC Analyst

Chicago, IL · On-site +1

$130K - $145K/yr

What you'll do: We're looking for a mid-level GRC Analyst to help us scale our compliance program through automation and run audits across SOC 2, ISO 27001, and SOX. This is a hands-on, technical ...

US Anesthesia Partners, Inc.

GRC Analyst

$80K - $137K/yr

Overview The GRC Analyst will play a critical role in strengthening the security posture of our ... SOC 2, NIST, and other applicable frameworks). * Oversees the development and maintenance of ...

Saanvi Technologies

GRC Analyst

Southfield, MI · On-site

... the IS GRC - Risk & Compliance Senior Analyst will support the firm's Governance, Risk, and ... ISO 27001 * SOC 2 * PCI DSS * HIPAA * Other global security/compliance standards * Strong ...

NorthMark Strategies LLC

GRC Analyst

Dallas, TX · On-site

NMC2 is hiring a GRC Analyst to join the Information Security team, reporting to the GRC & Privacy ... Working knowledge of at least two major security frameworks or standards -- ISO 27001, SOC 2 TSC ...

NextgenID

GRC Analyst

Fairfax, VA · On-site

$75K - $95K/yr

Worked with a control framework (NIST 800-53, 800-63, ISO 27001, or SOC 2) on real evidence or gap ... As GRC Analyst, you will see your work in every certification we hold and every customer ...

NextgenID

$75K - $95K/yr

Worked with a control framework (NIST 800-53, 800-63, ISO 27001, or SOC 2) on real evidence or gap ... As GRC Analyst, you will see your work in every certification we hold and every customer ...

NorthMark Strategies

GRC Analyst

Dallas, TX · On-site

THE POSITION NMC² is hiring a GRC Analyst to join the Information Security team, reporting to the ... Working knowledge of at least two major security frameworks or standards - ISO 27001, SOC 2 TSC ...

NinjaTrader

GRC Analyst

Chicago, IL · On-site

What you'll do: We're looking for a mid-level GRC Analyst to help us scale our compliance program ... Run and coordinate audits for SOC 2 (Type I and Type II), ISO 27001, and SOX, including scoping ...

next page

Showing results 1-20

All JobsReal Estate JobsSecurity JobsGrc Soc Analyst Jobs

Grc Soc Analyst information

See salary details

$36.5K

$97.7K

$228.5K

How much do grc soc analyst jobs pay per year?

As of Sep 10, 2026, the average yearly pay for grc soc analyst in the United States is $97,659.00, according to ZipRecruiter salary data. Most workers in this role earn between $55,000.00 and $111,000.00 per year, depending on experience, location, and employer.

What is a GRC SOC Analyst?

A GRC SOC Analyst is a cybersecurity professional responsible for managing and monitoring an organization's Governance, Risk, and Compliance (GRC) framework within a Security Operations Center (SOC). Their main duties include assessing security risks, ensuring compliance with regulations and standards, monitoring security alerts, and responding to incidents. They help to create policies and procedures that align with best practices, conduct regular audits, and report on security posture to stakeholders. This role often acts as a bridge between technical security operations and the business’s compliance requirements.

What are the key skills and qualifications needed to thrive as a GRC SOC Analyst?

To thrive as a GRC SOC Analyst, you need a solid understanding of cybersecurity principles, risk management, regulatory compliance frameworks (such as NIST, ISO 27001), and typically a degree in information security or related fields. Familiarity with security information and event management (SIEM) tools, incident response platforms, and relevant certifications like CISSP or CISM is often required. Strong analytical thinking, attention to detail, and effective communication skills help analysts investigate threats and communicate risks. These skills and qualities are crucial for identifying vulnerabilities, ensuring compliance, and protecting organizational assets from evolving cyber threats.

How does a GRC SOC Analyst typically collaborate with other departments to ensure effective risk management?

A GRC SOC Analyst regularly works with IT, compliance, and business units to identify, assess, and mitigate security risks. They facilitate communication between technical and non-technical teams by translating security requirements and findings into actionable steps for different stakeholders. This collaborative approach ensures that security controls align with organizational policies and regulatory standards, supporting a comprehensive risk management strategy. Effective teamwork and clear communication are essential for success in this role.

What states have the most Grc Soc Analyst jobs?

States with the most job openings for Grc Soc Analyst jobs include:

What are popular job titles related to Grc Soc Analyst jobs?

For Grc Soc Analyst jobs, the most frequently searched job titles are:

Infographic showing various Grc Soc Analyst job openings in the United States as of August 2026, with employment types broken down into 90% Full Time, 5% Part Time, and 5% Contract. Highlights an 80% Physical, 8% Hybrid, and 12% Remote job distribution, with an average salary of $97,659 per year, or $47 per hour.

SOC Analyst

Remote

Eleven Recruiting
Recruiting and Staffing Services • 11 - 50 employees
Learn more about Eleven Recruitingexternal

Full-time

Re-posted 19 days ago

Job description

Job Summary:
Eleven Recruiting is a specialized technology staffing agency supporting professional and financial services companies, and they are seeking an experienced SOC Analyst to join their client, an investment firm. The role involves interacting with colleagues across the Cybersecurity team, triaging security incidents, conducting threat hunting, and collaborating with engineering teams to improve workflows and tool usage.
Responsibilities:
• Effectively interact with colleagues across the Cybersecurity team, as well as the broader Technology and Application teams.
• Responsible for initial or secondary triage of security incidents identified by internal controls or external SOC partners.
• Proficient in Threat Research and understanding the latest malware trends, common attack TTPs, and the general threat landscape.
• Proficient in Incident Response and automation workflows as it relates to Security Operations.
• Demonstrates ability to author content using a variety of query languages, as well as scripting for event enrichment and investigation.
• Detects, identifies, and responds to cyber events, threats, security risks and vulnerabilities in line with cyber security policies and procedures.
• Conducts threat hunting and analysis using various toolsets based on intelligence gathered.
• Responsible for documenting the incident life cycle, conducting handoffs, escalation, and providing support during cyber incidents.
• Partner with the security engineering and platform engineering teams to improve tool usage and workflow.
• Influence the planning and execution of incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).
• Build and execute a program for continuous security controls testing and validation.
• Work with the GRC team to align with GRC controls testing.
• Perform other duties as planned.
Qualifications:
Required:
• Bachelor's degree in computer science, Information Technology, or related field.
• 5+ years of experience in Enterprise Cybersecurity, or with a reputed Services / consulting firm offering security operations consulting or equivalent public sector experience.
• Experience with SIEM tools (Splunk, SumoLogic, Sentinel, QRadar, etc.) and Endpoint Detection & Response tools (CrowdStrike, CarbonBlack, SentinelOne, etc.).
• Experience engaging in a 24x7 operational environment.
• Experience with SQL and scripting (such as PowerShell).
• Results oriented and the ability to manage multiple tasks and deadlines with attention to detail.
• Strong communication and self-management skills.
Preferred:
• Professional Certifications such as CISSP, CISM, CEH, GCIH, GCIA, GSOC a plus.
• Experience testing and validating security controls a plus.
• Experience in SOAR (Security Orchestration Automation Response) platform preferred.
Company:
Eleven Recruiting provides staffing services and employment assistance for professionals. Founded in 2018, the company is headquartered in Los Angeles, USA, with a team of 11-50 employees. The company is currently Early Stage.

Apply