GRC Analyst

The GRC Analyst supports the development, implementation, and maintenance of governance, risk management, and compliance programs within the organization. The role involves assessing security risks, monitoring compliance with internal policies and external regulations, coordinating audits, and ensuring that appropriate controls are in place to protect business information and technology assets.

What you’ll do

The GRC Analyst works with cross-functional teams, including Information Security, IT, Legal, Privacy, Internal Audit, and Business Operations, to identify risks, track remediation activities, and improve the organization’s overall risk and compliance posture.

About you

Your experience should include:

Experience in Governance, Risk, and Compliance (GRC), information security, IT risk management, or cybersecurity compliance roles.

Hands-on experience performing security risk assessments, control assessments, compliance and Privacy reviews.

Experience working with security frameworks and standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, or similar regulatory requirements.

Experience supporting internal and external audits, including evidence collection, control validation, and remediation tracking.

Experience developing, reviewing, and maintaining security policies, standards, procedures, and compliance documentation.

Experience managing risk registers, control matrices, audit findings, and corrective action plans.

Experience conducting third-party/vendor security risk assessments and reviewing supplier compliance documentation.

Important Notice for Paxos Applicants Fraudulent accounts sometimes pose as Paxos recruiters on LinkedIn and other platforms, and fake websites sometimes impersonate our careers site. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information.

To verify a legitimate Paxos opportunity:

Our only official careers site is paxos.com/careers

We only use @ paxos.com email addresses

We never ask for payment or financial details to apply, interview, or work here

For technical roles, we do not perform a coding interview without prior screening by our engineering team

Thanks for your interest in Paxos!