GRC Analyst

American Tower

. Act as a liaison between IT and business units to support governance policies, standards, frameworks, and tools .

Posted 10/28/2026full-timeBoston • Massachusetts • United StatesJuniorMid-Level💰 $82,500 - $105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Governance, Risk, and Compliance (GRC) with a strong focus on Information Security policies, standards, and frameworks. Proficient in requirements gathering, documentation, and risk assessment methodologies while effectively collaborating with cross-functional teams.

Highest-signal resume keywords

Governance, Risk, And Compliance (GRC)Information SecurityRequirements GatheringRisk AssessmentProject Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityRisk ManagementAccess Security PoliciesData AnalysisSecurity Architecture DevelopmentCompliance DocumentationISO 27001/27002 StandardsITILData Privacy RegulationsRisk Remediation

Soft Skills

Strong Organization SkillsPlanning SkillsExcellent Communication SkillsTeam CollaborationPrioritization Skills

Tools & Technologies

Microsoft Office SuiteOracleGRC Tools

Industry Keywords

Governance PoliciesCompliance IssuesSecurity StandardsRisk Assessment MethodsHIPAAMA CMR 201Red Flag Regulations

Tech Stack

Tools & technologies

Cyber SecurityOracle

About the role

Key responsibilities & impact

Act as a liaison between IT and business units to support governance policies, standards, frameworks, and tools
Support requirements gathering and documentation for Information Security projects and programs
Set up and lead meetings to clarify requirements and workflows and identify solutions
Manage GRC ticket maintenance and provide guidance to stakeholders on GRC topics
Monitor and maintain risk remediation activities, compliance issues, documented risks, and tracked exceptions
Provide guidance and training on governance, risk, and compliance topics
Address information security governance and compliance concerns with business partners and recommend improvements
Assist with development of security architecture, policies, principles, and standards
Research and stay current on access security issues
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s degree in Information Security, Cybersecurity, Risk Management, or equivalent work experience preferred
Minimum 2 years of experience in Governance, Risk, and Compliance (GRC) or Information Security required
Experience conducting requirements gathering sessions and documentation, including data analysis preferred
Experience developing, documenting and maintaining access and security policies, processes, procedures, and standards preferred
Strong organization, planning, and project management skills
Ability to prioritize tasks for self and team to meet requirements and deadlines
Ability to work with different functional groups and levels of employees
Excellent written and verbal communication skills
Ability to work individually and in team settings with cross-functional teams
Strong computer skills, including Microsoft Office suite and Oracle
Knowledge of access, security, and risk assessment methods and technologies
Knowledge of Information Security Standards, including ISO 27001/27002 and ITIL
Knowledge of Data Privacy and Compliance Regulations, including MA CMR 201, HIPPA, and Red Flag

Benefits

Comp & perks

Annual bonus eligibility
Annual equity award eligibility
Employee Stock Purchase Plan (ESPP)
Healthcare coverage
401(k) savings plan
Paid time off
Company holidays
Sick leave
Parental leave
Employee Assistance Program focused on mental and financial wellness