Senior GRC Analyst

Ranked among the largest accounting and consulting firms in the country and consistently recognized as a Great Place to Work, Cherry Bekaert delivers innovative advisory, assurance and tax services to our clients. We are proud to foster a collaborative environment focused on enabling your career growth and continuous professional development. We are seeking a Senior GRC Analyst to support the firm’s cybersecurity governance, risk management, and compliance program by helping design, implement, and maintain security policies, risk processes, and compliance controls across the enterprise. This role partners closely with IT, InfoSec, Legal, Privacy, and business stakeholders to assess risk, support regulatory and client-driven compliance requirements, and improve security maturity over time. The person in this role will have an opportunity to work remotely from within the United States.

As Senior GRC Analyst, you will:

• Manage the development, maintenance, and continuous improvement of the firm’s cybersecurity governance, risk, and compliance (GRC) program.
• Maintain and operationalize security policies, standards, procedures, and control frameworks aligned to industry standards (e.g., NIST CSF, NIST 800-53, ISO 27001, SOC 2, CMMC).
• Perform security risk assessments, including technology, vendor, and business process risk, and document findings, risk ratings, and recommended mitigations.
• Track identified risks, exceptions, and remediation activities through a centralized risk register and support risk acceptance workflows.
• Drive and support internal and external audits, client risk assessments, and due diligence requests (e.g., SOC reports, questionnaires, client security reviews).
• Partner with IT and Security teams to map technical controls to compliance requirements and validate control effectiveness.
• Manage and assist with third-party risk management activities, including vendor security reviews and ongoing risk monitoring.
• Contribute to incident governance activities, including post-incident reviews, risk tracking, and lessons learned documentation.
• Oversee and support compliance tooling and evidence collection (e.g., GRC platforms, audit management tools).
• Help define metrics and reporting related to risk posture, compliance status, and control maturity for leadership.
• Stay current on relevant regulatory, legal, and cybersecurity requirements impacting the firm and communicating changes to stakeholders.
• Collaborate cross-functionally to promote security awareness, risk-informed decision making, and consistent governance practices.
• Drive and support special projects related to SOC maturity, control improvements, M&A integration, and new technology risk assessments.

What you bring to the role:

•   Bachelor's Degree in Information Technology or Cybersecurity or other related degree.
• Relevant certifications (e.g. CISA, CRISC, CISM, or equivalent) preferred.
• Strong understanding of cybersecurity governance, risk management, and compliance concepts.
• Working knowledge of common security and compliance frameworks (e.g., NIST CSF, NIST 800-53, ISO 27001, SOC 2, CMMC).
• Experience performing security risk assessments and documenting risks, controls, and remediation plans.
• Ability to interpret technical security controls and map them to compliance and regulatory requirements.
• Experience supporting audits, assessments, or client security questionnaires.
• Familiarity with third-party risk management and vendor security review processes.
• Strong analytical skills with the ability to assess risk, identify gaps, and recommend practical improvements.

What you can expect from us:

• Our shared values that foster inclusion and belonging including uncompromising integrity, collaboration, trust, and mutual respect

• The opportunity to innovate and do work that motivates and engages you

• A collaborative environment focused on enabling you to further your career growth and continuous professional development

• Competitive compensation and a total rewards package that focuses on all aspects of your wellbeing

• Flexibility to do impactful work and the time to enjoy your life outside of work

• Opportunities to connect and learn from professionals from different backgrounds and with different cultures

Benefits Information:

Cherry Bekaert cares about our people. We offer competitive compensation packages based on performance that recognize the value our people bring to our clients and our Firm. The salary range for this position is included below. Individual salaries within this range are determined by a variety of factors including but not limited to the role, function and associated responsibilities, a candidate’s work experience, education, knowledge, skills, and geographic location. In addition, we offer a comprehensive, high-quality benefits program which includes annual bonus, medical, dental, and vision care; disability and life insurance; generous Paid Time Off; retirement plans; Paid Care Leave; and other programs that are dedicated to enhancing your personal and work life and providing you and your family with a measure of financial protection.

Pay Range:

About Cherry Bekaert

Cherry Bekaert, ranked among the largest assurance, tax and advisory firms in the U.S., serves clients across industries in all 50 U.S. states and internationally. For more details, visit https://www.cbh.com/disclosure/ 

Cherry Bekaert provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, citizenship status, protected veteran status, disability status, or any other category protected by applicable federal, state or local laws. https://careers.cbh.com/legal-disclosures/ contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws. 

This role is expected to accept applications for at least five calendar days and may continue to be posted until a qualified applicant is selected or the position has been cancelled.   

Candidates must demonstrate eligibility to work in the United States. Cherry Bekaert will not provide work sponsorship for this position. 

Cherry Bekaert LLP and Cherry Bekaert Advisory LLC are members of Allinial Global, an accountancy and business advisory global association. Visit us at  https://careers.cbh.com/ and follow us on LinkedIn, Instagram, Twitter and Facebook.  

© 2026 Cherry Bekaert. All Rights Reserved.