Governance, Risk & Compliance (GRC) Analyst (NYC or Washington D.C.)

The role

The GRC Analyst will support developing and maintaining frameworks to ensure the organization meets regulatory, contractual, and operational standards. This person will work with engineering, product, and leadership teams to maintain compliance with various security frameworks.

What you will do

• Support the implementation, tracking, and continuous improvement of compliance frameworks.
• Manage and organize compliance documentation, internal audits, and evidence collection.
• Collaborate with internal teams to update policies, procedures, and controls.
• Maintain awareness of security best practices in AWS cloud environments.
• Use compliance management tools to streamline reporting and evidence collection.
• Partner with technical teams to ensure identity and access management principles are applied.
• Contribute to audit readiness and respond to customer and vendor compliance inquiries.

Required qualifications

• 7-10 years of experience in information security, compliance, or risk management within regulated industries.
• Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53, or similar frameworks.
• Understanding of cloud-native SaaS environments, microservices, VPCs/VPNs, and identity management concepts such as RBAC and MFA.

Nice to have

• CGRC, CISSP, CISA, CIPP/US, HCISPP, CompTIA Security+
• CCSP, CCSK, AWS Security – Specialty, AWS Solutions Architect – Associate, or CompTIA Cloud+
• Experience working with public safety, justice, or government agencies, or other highly regulated data environments.
• Familiarity with CJIS, SOC-2 or overlapping control frameworks.
• Passion for building scalable, user-friendly compliance systems in a fast-growing organization.

About the company

Peregrine helps public safety organizations, state and local and governments, federal agencies, and private-sector institutions address society’s challenges with an AI-enabled platform. The company supports hundreds of customers across 30+ states and two countries.