GRC Analyst
Description Zywave's security and regulatory excellence depends on strong governance, risk, and compliance practices and this role sits at the center of that work. As a GRC Analyst, you will manage compliance frameworks, assess organizational risk, and help Zywave maintain the trust of the customers it serves. This role partners closely with IT, Legal, and R&D to keep Zywave's security posture audit-ready and ahead of evolving regulatory demands. What you will do:
- Develop, implement, and maintain risk and compliance management programs aligned with NIST, RMF, CSF, ISO 27001, and SOC 2 frameworks.
- Conduct regular assessments of organizational risks to ensure compliance with regulatory and internal standards.
- Respond to customer RFPs, and annual Risk Assessments
- Monitor and evaluate the effectiveness of controls and recommend improvements for operational security and compliance.
- Collaborate with cross-functional teams, including IT, Legal, and R&D, to implement security policies and procedures.
- Prepare comprehensive reports for stakeholders detailing risk assessments and compliance findings.
- Facilitate external audits and lead internal readiness assessments in maintenance of the established controls to support Zywave's compliance program.
What you should bring:
- 3-5 years of experience in Governance, Risk, and Compliance, with proven expertise in frameworks such as NIST, RMF, CSF, ISO 27001, and SOC 2.
- Familiarity with PCI DSS, HIPAA, DORA a plus
- Strong analytical and problem-solving skills with the ability to assess complex organizational risks.
- Excellent verbal and written communication skills to effectively deliver findings to stakeholders.
- Comfortable working independently and collaboratively in a fast-paced environment
- Relevant certifications such as CISA, CRISC are a plus.
Why Work at Zywave? Zywave empowers insurers and brokers to drive profitable growth and thrive in today's escalating risk landscape. Only Zywave delivers a powerful Performance Multiplier, bringing together transformative, ecosystem-wide capabilities to amplify impact across data, processes, people, and customer experiences. More than 15,000 insurers, MGAs, agencies, and brokerages trust Zywave to sharpen risk assessment, strengthen client relationships, and enhance operations. Additional information can be found at www.zywave.com. Equal Opportunity Employer Zywave is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other legally protected status. We are committed to building an inclusive workplace where everyone can do their best work. If you need a reasonable accommodation during the application or interview process, please contact our Talent Acquisition team. #LI-LK1