GRC analyst

Company Description

Frontier Cybersecurity Consulting helps organizations establish strong security and compliance programs that meet the expectations of regulators, auditors, and enterprise partners. The firm specializes in audit readiness, leading clients through risk assessments and remediation to prepare them for frameworks such as HIPAA, SOC 2, and other industry-specific standards. Frontier uses a practical, project-based approach to assess risk, build tailored controls and documentation, and leave clients audit-ready with defensible evidence.

For organizations seeking ongoing support, Frontier provides retained compliance monitoring to keep programs aligned with evolving regulations and threats. Based in South Florida, Frontier offers enterprise-grade cybersecurity and compliance rigor without enterprise-level overhead.

The GRC Analyst will support client engagements by performing risk assessments, control testing, and gap analyses across various compliance frameworks, including HIPAA and SOC 2. In this full-time hybrid role based in Miami, FL, the analyst will spend part of the time onsite with clients or the Frontier team and part working from home. Day-to-day responsibilities include gathering and analyzing evidence, documenting policies and procedures, mapping controls to regulatory and industry requirements, and preparing audit-ready artifacts.

The GRC Analyst will collaborate with consultants and client stakeholders to design practical remediation plans, track progress, and support ongoing compliance monitoring. The role also involves staying current on relevant regulations, standards, and emerging risks to help refine Frontier's methodologies and client guidance.

• Experience with governance, risk, and compliance practices, including risk assessments, control design, and audit readiness activities.
• Working knowledge of common frameworks and regulations (e.g., HIPAA, SOC 2, ISO 27001, NIST, PCI DSS) and how they apply in business environments.
• Strong analytical and documentation skills, including the ability to evaluate evidence, write clear policies and procedures, and create audit-ready reports.
• Proficiency with spreadsheets, document management tools, and collaboration platforms used to manage compliance programs and project tasks.
• Effective communication skills for working with both technical and non-technical stakeholders, including the ability to explain complex requirements in plain language.
• Ability to manage multiple projects, prioritize tasks, and work independently in a hybrid environment with limited supervision.
• Bachelor's degree in information security, information systems, business, or a related field; relevant certifications (e.g., CISA, CRISC, CISSP, HCISPP) are a plus.
• Prior experience in consulting, internal audit, or cybersecurity/compliance roles is preferred, especially in small to mid-sized business environments.