Mid GRC Analyst

AspenView Technology Partners

Mid-Level GRC Analyst supporting compliance and risk activities at AspenView. Leading audits, improving GRC platforms, and partnering with teams on risk assessments.

Posted 5/27/2026full-timeDenver • 🇺🇸 United StatesMid-LevelSeniorWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

internal auditsgovernancerisk managementcomplianceaudit management workflowsanalytical skillsprocess enhancementsrisk assessmentdocumentation preparationcontrol effectiveness metrics

Soft Skills

communication skillsdetail-oriented mindsetproactive approachability to explain complex conceptscollaborationcontinuous improvement

Tools & Technologies

GRC platformArcherServiceNow GRCLogicGateaudit management tools

Certifications & Qualifications

ISO 27001SOC 2HIPAASOXNIST CSF

Industry Keywords

technology-driven industryregulated industrykey risk indicatorsrisk controlsregulatory compliance

Tech Stack

Tools & technologies

ServiceNow

About the role

Key responsibilities & impact

Lead and execute internal audits across business units, ensuring alignment with frameworks such as ISO 27001, SOC 2, HIPAA, or SOX.
Maintain and enhance our GRC platform (e.g., Archer, ServiceNow GRC, or similar) to track controls, risks, and remediation activities.
Partner with IT, Security, and Operations teams to assess risks in new projects, vendors, and technologies.
Support certification and regulatory compliance efforts by preparing documentation, evidence, and audit responses.
Monitor and report on key risk indicators (KRIs) and control effectiveness metrics to leadership.
Drive continuous improvement by identifying gaps, recommending process enhancements, and implementing best practices.

Requirements

What you’ll need

3–5 years of experience in governance, risk, and compliance, preferably in a technology-driven or regulated industry.
Hands-on experience with GRC tools (e.g., Archer, LogicGate, ServiceNow GRC) and audit management workflows.
Familiarity with compliance frameworks such as ISO 27001, SOC 2, NIST CSF, HIPAA, or SOX.
Strong analytical skills with the ability to translate complex regulations into actionable controls.
Excellent communication skills—you can explain risk and compliance concepts to both technical and non-technical audiences.
A proactive, detail-oriented mindset with a passion for building secure, compliant, and ethical business practice.

Benefits

Comp & perks

Comprehensive benefits and wellness support
Flexible work model: hybrid, remote, or in-office