Cybersecurity GRC Analyst

Follett Content Solutions

Cybersecurity GRC Analyst strengthening Follett’s governance, risk, and compliance posture for education-content services. Managing policies, Microsoft Purview, audits, remediation, and security awareness.

Posted 8/4/2026full-timeMcHenry • Illinois • 🇺🇸 United StatesSeniorLead💰 $115,000 - $120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT security policy development, compliance management, and risk assessment, with a strong focus on operationalizing governance frameworks such as SOC 2 and PCI DSS. Proven ability to translate technical risks into business impacts while collaborating with cross-functional teams to enhance security posture and compliance readiness.

Highest-signal resume keywords

IT Security Policy DevelopmentMicrosoft Purview OperationalizationSOC 2 Compliance ManagementRisk Assessment ProceduresProject Management in Compliance Initiatives

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Governance Risk ComplianceData Loss Prevention (DLP)Incident Response GovernanceRole-Based Access Control (RBAC)Cybersecurity Awareness TrainingCompliance ReportingControl MappingAudit Readiness DocumentationRemediation Strategy DevelopmentTechnical Risk Translation

Soft Skills

Strong Written CommunicationStrong Oral CommunicationTeam-Oriented Interpersonal SkillsCollaboration with Diverse TeamsLeadership Documentation Creation

Tools & Technologies

Microsoft PurviewIntuneDefenderSentinelOneCompliance Tooling

Certifications & Qualifications

SOC 2 Type II CertificationPCI DSS ComplianceISO 27001 FamiliarityNIST CSF Familiarity

Industry Keywords

Cybersecurity OperationsCompliance InitiativesAudit Findings ClosureRegulatory RequirementsEmerging Regulatory Trends

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Draft, maintain, and enforce IT security policies, standards, and procedures across device management, identity, and data handling
Operationalize Microsoft Purview for data classification, DLP, insider risk, and compliance reporting
Align governance practices with organizational risk appetite and regulatory requirements
Serve as the primary point of contact for SOC 2 Type II certification efforts
Coordinate evidence collection, control mapping, auditors, consultants, and vendors
Support PCI DSS self-assessments and other compliance initiatives
Maintain audit-readiness documentation and leadership reporting
Track remediation plans and ensure timely closure of audit findings
Assist with internal risk assessments and recommend remediation strategies
Translate technical risks into business impact with IT and business stakeholders
Monitor compliance telemetry and integrate findings into governance processes
Identify and coordinate projects to close security gaps
Collaborate with IT Operations, Cybersecurity, and Application Development teams on tool deployments, implementation, tuning, and AI governance guardrails
Develop and deploy annual cybersecurity awareness training programs
Promote compliance and risk awareness across the organization
Provide guidance on SOC 2, NIST CSF, PCI DSS, and CIS Controls
Monitor emerging regulatory trends and recommend updates to policies, tools, and practices

Requirements

What you’ll need

7–10 years of experience
Bachelor’s degree or equivalent in Computer Science, Information Systems, Cybersecurity, or related discipline, or comparable applicable work experience
7+ years of related experience in IT, cybersecurity operations, or governance, risk, and compliance
Strong written and oral communication skills
Experience with Microsoft Purview, Intune, Defender, SentinelOne, or similar governance/security platforms
Familiarity with SOC 2, PCI DSS, ISO 27001, and NIST CSF
Ability to translate business requirements and risks into actionable governance and compliance controls
Knowledge of risk assessment procedures, policy formation, role-based authorization methodologies, and incident response governance
Solid project management skills in cross-functional environments involving vendors or auditors
Strong team-oriented interpersonal skills and ability to work with diverse teams
Experience coordinating with third-party providers, consultants, auditors, or managed service providers
Experience creating leadership-ready documentation, dashboards, or reports on compliance posture, risk trends, or remediation progress
Prior involvement in security awareness training or organizational compliance initiatives
Experience supporting or implementing RBAC, least-privilege models, or identity governance processes
Background working with IT Operations, Infrastructure, or Application Development teams to implement governance controls, close audit gaps, or deploy compliance tooling

Benefits

Comp & perks

Hybrid work schedule with 3 days in the office and 2 remote days
Remote option for the right person
Reasonable accommodations for job applicants with disabilities