ZipRecruiter

Log In

2

Remote Grc Analyst Jobs in Boston, MA (NOW HIRING)

Watts

IT Risk & Compliance Analyst

Andover, MA · On-site +1

$95K - $95K/yr

This role is remote and may be based anywhere within the United States. Primary Job Duties and ... Experience utilizing GRC, audit management, risk management, ticketing, or evidence management ...

Qualio

Director, Product Marketing

Boston, MA · Remote

... GRC. The Qualio team is all-remote, and currently distributed across North America, Europe and ... Analyst mentions, industry recognition, customer validation, and market narrative that positions ...

BitSight

Professional Services Consultant

Boston, MA · Remote

Coordinate with Analysts and other team members to execute client initiatives, troubleshoot issues ... Remote collaboration and teaming tools Belonging & Inclusion . Bitsight is proud to be an equal ...

All JobsGrc Analyst JobsRemote Grc Analyst JobsRemote Grc Analyst Jobs in Boston, MA

Remote Grc Analyst information

See Boston, MA salary details

$39.7K

$106.1K

$248.2K

How much do remote grc analyst jobs pay per year?

As of Sep 4, 2026, the average yearly pay for remote grc analyst in Boston, MA is $106,097.00, according to ZipRecruiter salary data. Most workers in this role earn between $59,800.00 and $120,600.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a remote GRC analyst?

To thrive as a Remote GRC Analyst, you need strong analytical abilities, a solid understanding of risk management and compliance frameworks (such as ISO 27001, NIST, or SOX), and a relevant degree in information security, business, or a related field. Familiarity with GRC platforms (like RSA Archer or ServiceNow), along with certifications such as CISA, CISM, or CRISC, is highly valued. Excellent communication, organization, and problem-solving skills are essential for effectively managing compliance documentation and collaborating remotely across teams. These attributes ensure you can proactively identify risks, implement controls, and support ongoing governance requirements in a dynamic, decentralized work environment.

What are some typical challenges faced by a remote GRC analyst, and how are they addressed?

A common challenge for Remote GRC Analysts is maintaining efficient communication and collaboration with cross-functional teams while working offsite. To address this, organizations generally provide access to collaboration tools like Slack, Microsoft Teams, and secure document management systems, enabling seamless coordination. Additionally, you may need to proactively manage your workflow and stay updated on changes in regulations and company policies, often requiring strong time management and self-motivation. Success in this role often comes from building solid virtual relationships and actively participating in remote meetings, ensuring you remain an integral part of the compliance and risk management processes.

What are the most commonly searched types of Grc Analyst jobs in Boston, MA?

The most popular types of Grc Analyst jobs in Boston, MA are:

What are popular job titles related to Remote Grc Analyst jobs in Boston, MA?

For Remote Grc Analyst jobs in Boston, MA, the most frequently searched job titles are:

What job categories do people searching Remote Grc Analyst jobs in Boston, MA look for?

The top searched job categories for Remote Grc Analyst jobs in Boston, MA are:

What cities near Boston, MA are hiring for Remote Grc Analyst jobs?

Cities near Boston, MA with the most Remote Grc Analyst job openings:

Remote Grc Analyst jobs near you
Infographic showing various Remote Grc Analyst job openings in Boston, MA as of August 2026, with employment types broken down into 86% Full Time, 10% Part Time, and 4% Contract. Highlights an 79% Physical, 8% Hybrid, and 13% Remote job distribution, with an average salary of $106,097 per year, or $51 per hour.

Senior Security Compliance Analyst

OneStudyTeam

Boston, MA • Remote

$110K - $140K/yr

Full-time

Re-posted 20 days ago

Key responsibilities

  • Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks.

  • Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement.

  • Perform gap analyses and risk assessments to identify and remediate compliance risks.

Job description

At OneStudyTeam (a Reify Health company), we specialize in speeding up clinical trials and increasing the chance of new therapies being approved with the ultimate goal of improving patient outcomes. Our cloud-based platform, StudyTeam, brings research site workflows online and enables sites, sponsors, and other key stakeholders to work together more effectively. StudyTeam is trusted by the largest global biopharmaceutical companies, used in over 6,000 research sites, and is available in over 100 countries. Join us in our mission to advance clinical research and improve patient care.

One mission. One team. That's OneStudyTeam.

We are seeking a Senior Security Compliance Analyst with expertise in Governance, Risk, and Compliance (GRC) to support and enhance our security and compliance programs within the healthcare industry. This role is critical in ensuring adherence to industry regulations, responding to customer audits, and maintaining compliance with ISO 27001, HIPAA, and other security frameworks.

The ideal candidate will be a detail-oriented compliance expert who can navigate complex regulatory environments, assist with internal/external audits, and drive continuous improvement in security governance. The ideal candidate must be able to operate independently while delivering on the following duties.

What You'll Be Working On:
  • Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks.
  • Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement.
  • Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory requirements applicable to healthcare data security.
  • Develop and maintain policies, procedures, and security documentation to meet regulatory and contractual obligations.
  • Perform gap analyses and risk assessments to identify and remediate compliance risks.
  • Manage and improve security governance frameworks, ensuring alignment with industry best practices and business objectives.
  • Conduct third-party vendor risk assessments, ensuring compliance with security policies and contractual obligations.
  • Monitor security controls, ensuring effectiveness and continuous improvement in alignment with security frameworks.
  • Support security awareness training initiatives, ensuring employees understand compliance responsibilities.
  • Stay current on ISO 27001, HIPAA, NIST 800-53, and other relevant standards, translating them into actionable security controls.
  • Assist in defining security metrics and reporting on compliance status and risk posture to leadership.
  • Work closely with legal, security, IT, and business teams to align compliance requirements with security operations.
What You'll Bring to OneStudyTeam:
  • Minimum Education:
    • Minimum of a Bachelor's degree in Information Security, Computer Science, Risk Management, or related field (or equivalent experience). 
  • Minimum Experience:
    • Minimum 8+ years of progressive experience in GRC, compliance, or security audit roles. 
  • Experience in healthcare or regulated industries strongly preferred. 
  • Certifications strongly preferred: ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CISA, HITRUST CCSFP, CRISC. 
  • Experience leading ISO 27001, SOC2, or HITRUST audits, including ISMS implementation and external audit coordination. 
  • Strong understanding of NIST CSF, SOC 2, GDPR, and other security frameworks.  
  • Hands-on experience with customer security audits, including responding to security questionnaires and managing security assessments. 
  • Ability to perform risk assessments, policy reviews, and compliance gap analyses. 
  • Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders. 
  • Detail-oriented with excellent organizational and project management skills.  
  • Ability to work independently and collaboratively in a remote environment. 
  • Familiarity with GRC tools (e.g., OneTrust, LogicGate, Archer, Vanta, Drata) is a plus. 

The expected pay range for this role is $110,000 - $140,000 USD per year for full time team members.

#LI-Remote

We value diversity and believe the unique contributions each of us brings drives our success. We do not discriminate on the basis of race, sex, religion, color, national origin, gender identity, age, marital status, veteran status, or disability status.

Note: OneStudyTeam is unable to sponsor work visas at this time. If you are a non-U.S. resident applicant, please note that OneStudyTeam works with a Professional Employer Organization.

As a condition of employment, you will abide by all organizational security and privacy policies.

This organization participates in E-Verify (E-Verify's Right to Work guidance can be found here).

Mandatory Employer Disclosures:
Notice to Illinois applicants: Applicants are not obligated to disclose expunged juvenile records or adjudication, arrest, or conviction.
Notice to Connecticut applicants: OneStudyTeam may require applicants to submit to a urinalysis drug test in connection with an application for employment.
Notice to Arizona, Georgia, Indiana, and North Dakota applicants: OneStudyTeam complies with applicable laws prohibiting smoking in and around places of employment.
Notice to Massachusetts applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Notice to Rhode Island applicants: OneStudyTeam complies with Rhode Island law prohibiting smoking in enclosed areas within places of employment. OneStudyTeam is also subject to is subject to Chapters 29–38 of Title 28 of the Rhode Island General Laws.
Notice to Maryland applicants: UNDER MARYLAND LAW, AN EMPLOYER MAY NOT REQUIRE OR DEMAND, AS A CONDITION OF EMPLOYMENT, PROSPECTIVE EMPLOYMENT, OR CONTINUED EMPLOYMENT, THAT AN INDIVIDUAL SUBMIT TO OR TAKE A LIE DETECTOR OR SIMILAR TEST. AN EMPLOYER WHO VIOLATES THIS LAW IS GUILTY OF A MISDEMEANOR AND SUBJECT TO A FINE NOT EXCEEDING $100.