GRC Analyst

Company overview

Frontier Cybersecurity Consulting works with organizations to strengthen their security and compliance programs so they can satisfy regulator, auditor, and enterprise partner expectations. The firm focuses on making clients audit-ready by running risk assessments, closing gaps, and building practical controls and documentation for standards like HIPAA, SOC 2, and related industry frameworks. Its delivery style is hands-on and project-driven, with an emphasis on tailored remediation and defensible evidence. Frontier also provides ongoing compliance oversight to help programs stay current as rules and threats change. Operating from South Florida, the company positions itself as a resource for businesses that want enterprise-level discipline without the overhead of a large enterprise.

Role overview

This is a full-time, onsite GRC Analyst position based in Miami, FL. The role supports governance, risk, and compliance projects by performing risk assessments, aligning controls with regulatory and framework requirements, and helping clients prepare for audits such as HIPAA and SOC 2. The analyst will build and maintain compliance records, coordinate remediation work, and ensure documentation remains ready for review. The job also includes keeping up with regulatory updates, joining client discussions to explain requirements and findings, and working with both technical and business teams to make sure security controls support organizational goals. In addition, the analyst will help improve the company’s templates, methods, and compliance monitoring approach over time.

Qualifications

• A solid grasp of governance, risk, and compliance concepts, along with hands-on exposure to common frameworks such as HIPAA, SOC 2, ISO 27001, and NIST, is expected.
• The person should be able to carry out risk reviews, map controls, and identify gaps, then convert those requirements into workable controls for a specific organization.
• Experience creating and updating policies, procedures, standards, and other compliance documents is important, with care taken to keep the language clear and consistent.
• Comfort with gathering evidence, preparing for audits, and partnering with auditors or external assessors is needed to support successful reviews.
• Strong analytical judgment and critical thinking are necessary to interpret regulations and security best practices across different business settings.
• The role requires good communication and teamwork skills for working with technical groups, business stakeholders, and clients.
• Good organization is essential, including the ability to prioritize tasks, manage deadlines, and keep records accurate across several projects.
• Working knowledge of cybersecurity topics and controls, such as access management, logging and monitoring, and data protection, is considered a strong advantage.
• A bachelor’s degree in information security, information systems, compliance, or a similar field is preferred, though equivalent practical experience is also acceptable.
• Professional certifications such as CISA, CRISC, CISSP, or CCSK would be beneficial.

Additional information

This role is based in Miami, FL and requires onsite presence. No salary, stipend, start date, application deadline, or number of openings was provided.