Remote Grc Analyst Jobs in Texas (NOW HIRING)

We are seeking a Technical Customer Support Representative (REMOTE) for a full-time and direct hire role for one of our amazing partners. This role is remote, but you MUST be living in the United States and be a US Citizen or Green Card Holder. This role does NOT offer sponsorship, it's NOT a consulting role, and we do NOT work with 3rd parties!

Overview

We are seeking a GRC Analyst to help strengthen and manage the day-to-day operations of a growing Governance, Risk, and Compliance program supporting a highly regulated technology environment. You will work closely with the Compliance leader and cross-functional teams to maintain compliance programs, coordinate audit activities, manage security evidence, respond to customer assessments, and support public-sector proposals. You'll play an important role in keeping controls, policies, documentation, and compliance commitments organized, current, and audit ready. You will join an established security and compliance program and take ownership of the execution that keeps it running smoothly.

This position sits at the intersection of security, compliance, technology, and business development. We need someone who can take complex requirements, turn them into organized action, and ensure the supporting evidence and documentation are strong enough to stand up to customer, auditor, and government scrutiny. You'll have the opportunity to make a meaningful impact by helping mature a growing GRC function while supporting the organization's ability to meet demanding security requirements and compete for public-sector business.

Responsibilities:

Governance, Risk & Compliance

• Support the ongoing GRC program across NIST SP 800-53, CJIS Security Policy, SOC 2, and GovRAMP requirements.
• Maintain the organizational risk register and assist with periodic risk assessments.
• Monitor control performance and help identify and track gaps or remediation needs.
• Manage the day-to-day policy lifecycle, including drafting, revisions, version control, approvals, annual reviews, and employee attestations.
• Maintain accurate compliance documentation and ensure required records remain current.

Audit & Authorization Support

• Serve as a primary day-to-day resource supporting SOC 2 and GovRAMP audit and authorization activities under the guidance of a Director.
• Track remediation activities resulting from gap assessments and audits.
• Collect, organize, review, and maintain evidence needed to demonstrate control effectiveness.
• Coordinate with engineering and other internal teams to obtain required evidence and keep compliance-related action items moving.
• Help ensure audit artifacts are complete, accurate, and ready for third-party review.

Security Questionnaires & Assessments

• Assist with responses to customer security questionnaires, vendor assessments, and annual risk reviews.
• Develop and maintain a centralized library of approved security and compliance responses.
• Improve the efficiency, consistency, and quality of responses across customer and vendor assessments.
• Work with internal subject matter experts to validate technical and security responses when needed.

Contract & Regulatory Compliance

• Monitor security, privacy, reporting, and other compliance obligations contained within customer agreements.
• Track key contractual requirements and deadlines.
• Coordinate with internal stakeholders to ensure commitments are understood and fulfilled.

RFPs & Public-Sector Proposals

• Partner with business development and growth teams on government and public-sector RFPs and solicitations.
• Develop clear, compelling technical, security, and compliance responses.
• Draft and edit proposal sections, management and technical narratives, amendments, clarification responses, and related materials.
• Participate in proposal Q&A and post-award debrief activities as needed.
• Build and maintain reusable proposal content to improve future response efficiency.
• Apply strong technical writing skills to customer-facing documentation and other business materials.

Requirements:

• 3–5 years of experience in GRC, security compliance, information security, audit, or a related field.
• Experience working in a federal, regulated, or cloud/SaaS environment.
• Hands-on experience supporting at least one complete audit or assessment cycle involving SOC 2, FedRAMP, StateRAMP/GovRAMP, ISO 27001, CMMC, or a comparable framework.
• Working knowledge of NIST SP 800-53, SOC 2, and GovRAMP.
• Strong understanding of security controls, audit evidence, risk management, and compliance documentation.
• Ability to manage multiple projects and deadlines simultaneously.
• Exceptional written and verbal communication skills.
• Ability to translate technical information into clear, practical language for auditors, customers, procurement teams, and business stakeholders.
• Comfortable translating compliance requirements into actionable tasks for technical teams.
• Strong attention to detail and a disciplined approach to evidence and documentation.
• Able to identify when documentation or evidence is insufficient and proactively address gaps.
• Highly organized with the ability to maintain recurring compliance activities, deadlines, reports, and attestations.
• Comfortable working independently while taking direction from an experienced compliance leader.
• Able to build relationships and drive follow-through across teams without direct authority.
• Adaptable and effective in a fast-paced environment where priorities can shift quickly.
• Strategic enough to recognize long-term process improvements while remaining focused on immediate execution.
• U.S. citizenship or permanent residency is required due to the nature of the organization's government contract work. Employment is contingent upon successfully completing a fingerprint-based state and federal background check.

Preferred Qualifications:

• Experience working with the CJIS Security Policy.
• Experience supporting government or public-sector RFPs, RFIs, or proposal development.
• Experience with GRC or compliance automation platforms such as Vanta, Drata, Secureframe, or similar tools.
• Experience using AI tools for research, drafting, documentation, analysis, and compliance-related workflows.
• Experience working with government contractors or organizations serving federal, state, or local government customers.

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status.