Remote opportunity at
bswiftGRC Analyst
bswift, a provider of benefits administration solutions established in 1996, is seeking a GRC Analyst to join its Information Security team. This full-time position comes with…
Career Tools
About This Role
bswift, a provider of benefits administration solutions established in 1996, is seeking a GRC Analyst to join its Information Security team. This full-time position comes with a base salary ranging from USD 90,000 to 110,000 per year and operates on a remote basis. In this role, the analyst supports governance, risk, compliance, and client assurance programs by collaborating with internal departments such as Sales, Legal, Product, and Client Experience. The…
Job Description
bswift, a provider of benefits administration solutions established in 1996, is seeking a GRC Analyst to join its Information Security team. This full-time position comes with a base salary ranging from USD 90,000 to 110,000 per year and operates on a remote basis. In this role, the analyst supports governance, risk, compliance, and client assurance programs by collaborating with internal departments such as Sales, Legal, Product, and Client Experience. The individual handles client security inquiries, manages security questionnaires, contributes to compliance audits, administers user access reviews, and assists with contract security addenda. This opportunity suits detail-oriented individuals with a background in information security or IT audit who possess strong written communication skills and the ability to manage competing deadlines in a fast-paced environment.
Responsibilities
- Manage client assurance requests, security questionnaires, and RFPs by drafting defensible responses aligned with security practices.
- Partner with cross-functional teams including Sales, Legal, and Product to gather information for customer security inquiries within service-level expectations.
- Support internal and external audits such as SOC 2 by organizing evidence requests and maintaining compliance documentation.
- Execute recurring User Access Reviews for critical systems to ensure alignment with least-privilege principles and track related remediation actions.
- Assist with the review and negotiation of customer security addenda and contract redlines alongside Legal and Information Security stakeholders.
- Identify opportunities to improve processes, documentation, and automation across the Governance, Risk, and Compliance program.
Requirements
- At least two years of experience in information security, IT audit, GRC, security compliance, client assurance, or a related discipline.
- Working knowledge of information security concepts including SOC 2, access management, least privilege, segregation of duties, disaster recovery, and data protection.
- Proficiency in interpreting questionnaires, gathering data from stakeholders, and writing professional responses.
- Strong written communication skills capable of explaining technical concepts to various audiences.
- Exceptional attention to detail, organization, and the ability to manage multiple priorities and deadlines.
- Proficiency with Microsoft Office applications including Word, Excel, PowerPoint, and Teams.
Qualifications
- Bachelor's degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Accounting, or a related field, or an equivalent combination of education and work experience.
- Experience completing customer security questionnaires, due diligence requests, or RFP security sections.
- Experience supporting SOC 2 audits, IT audits, or compliance assessments.
- Experience administering access certification or user access review programs.
- Experience reviewing security contract language or security addenda with Legal teams.
- Familiarity with GRC and security questionnaire management platforms such as SecurityPal, Archer, OneTrust, or MetricStream.
- Background in SaaS, healthcare technology, benefits administration, financial services, or other regulated industries.
- Relevant credentials including CISA, CRISC, Security+, or CISSP.
Core Skills
Benefits
- Comprehensive health, dental, and vision insurance plans.
- Competitive compensation package with performance-based incentives for most roles.
- Employer-sponsored retirement savings plans.
- Professional development opportunities, including training and career progression resources.
- Employee wellbeing initiatives covering mental health and wellness resources.
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this GRC Analyst position remote?
Yes, the posting specifies that the role is remote with a remote-first, office-friendly environment.
What is the salary range for this role?
The base salary range is USD 90,000 to 110,000 per year, exclusive of fringe benefits or potential bonuses, with the final offer determined by factors such as geographic location, skills, education, experience, and internal equity.
What employment type is this?
This is a full-time employment position.
What education or experience is required?
Candidates must have a bachelor's degree in a related field or an equivalent combination of education and work experience, along with two or more years of experience in information security, IT audit, GRC, security compliance, client assurance, or a related discipline.
What are the standard working hours?
Standard working hours are 8:00 AM to 5:00 PM Central Time, unless stated otherwise in the job description.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.