Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Optiv

GRC Analyst

Optiv

. Generate user access and permissions reports using approved systems, report parameters, and procedures .

Posted 10/16/2026full-timeRemote • Kansas • United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in GRC, audit support, and access governance, with a strong focus on compliance operations and risk management. Proficient in managing evidence quality, record retention, and escalations while ensuring adherence to regulatory requirements.

Highest-signal resume keywords
GRC ExperienceAccess GovernanceAudit SupportCompliance ReportingSpreadsheet Analysis

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Access ReportingElevated-Access ReviewsInactive-Account ReconciliationEvidence Quality ChecksData ReconciliationCompliance Forms PreparationAudit Evidence PreparationWorkflow ManagementRecord Retention PracticesException Handling
Soft Skills
Clear CommunicationStakeholder CoordinationDeadline ManagementDiscretion with Confidential InformationProblem Identification
Tools & Technologies
Spreadsheet SoftwareWorkflow SystemsDocument RepositoriesGRC PlatformsIdentity-Governance Platforms
Certifications & Qualifications
Security+CISACRISCCGRC
Industry Keywords
NIST Cybersecurity FrameworkNIST SP 800-53ISO/IEC 27001SOC 2Compliance OperationsRisk ManagementThird-Party Risk OperationsAudit TrailsEvidence RetentionEscalation Practices

Tech Stack

Tools & technologies
Cyber Security

About the role

Key responsibilities & impact
  • Generate user access and permissions reports using approved systems, report parameters, and procedures
  • Reconcile non-user and inactive accounts across in-scope systems; document discrepancies and route exceptions
  • Maintain records related to staffing, assigned duties, access, and control reviews
  • Support elevated-access reviews and exception handling
  • Review system activity logs and audit trails according to defined criteria and schedules
  • Archive, organize, and review security- and audit-related email reports and records
  • Check assigned evidence for completeness, accuracy, applicable period, source, and retrievability
  • Maintain traceable records of source, review status, disposition, owner, exception, escalation, and completion date
  • Complete compliance forms, review trackers, attestations, and supporting records
  • Assist in preparing audit reports and supporting evidence for regulatory and assigned reviews
  • Perform accuracy, completeness, consistency, and traceability checks on deliverables
  • Respond to assigned evidence or information requests and document completion, dependencies, and exceptions
  • Manage report queues and request tracking for GRC and third-party risk workflows
  • Monitor aging items, follow up for missing information, and escalate blockers or overdue requests
  • Coordinate with stakeholders to clarify requests and support timely completion
  • Perform assigned work using client-owned or client-approved systems during applicable service windows
  • Follow procedures, access restrictions, data-handling requirements, naming conventions, and evidence-retention practices
  • Protect confidential, security-sensitive, employee, and access-related information
  • Prepare status and operational metrics, including timeliness, aging, completion, exceptions, and quality
  • Identify recurring process or data-quality issues and recommend procedure clarifications
  • Escalate suspected control failures, anomalous activity, unresolved reconciliation issues, missing audit evidence, access concerns, overdue work, and decisions outside assigned authority

Requirements

What you’ll need
  • At least 2 years of relevant experience in GRC, audit support, access governance, compliance operations, cybersecurity, risk management, third-party risk operations, or a related control function
  • Working knowledge of access governance, account status and ownership, elevated access, exception handling, evidence quality, record retention, and escalation practices
  • Familiarity with foundational audit and compliance concepts, including source evidence, review criteria, populations, findings, management responses, and remediation records
  • Ability to review structured records, reconcile data across systems, identify discrepancies, maintain evidence, and follow defined procedures
  • Proficiency with spreadsheet analysis and reporting, including filtering, lookups, reconciliation, and pivot tables
  • Experience with workflow systems, email-based reports, and document repositories
  • Ability to manage recurring and request-driven work, meet deadlines, maintain accurate trackers, and escalate exceptions promptly
  • Ability to handle confidential and security-sensitive information with discretion and comply with applicable access, privacy, and data-handling requirements
  • Ability to communicate clearly with technical and nontechnical stakeholders and document work so that it is reviewable and auditable
  • Bachelor’s degree in cybersecurity, information systems, risk management, business, or a related field, or an equivalent combination of education, training, certifications, military service, and relevant practical experience
  • Experience with access reporting, elevated-access reviews, inactive-account reconciliation, review trackers, evidence repositories, and exception records
  • Experience preparing audit evidence, compliance reports, or regulatory support materials under established review criteria
  • Experience supporting GRC or third-party risk workflows in a managed-services environment
  • Experience with spreadsheet, workflow, document-repository, GRC, or identity-governance platforms
  • Familiarity with NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, SOC 2, or applicable regulatory requirements
  • Relevant training or certification such as Security+, CISA, CRISC, CGRC, or comparable coursework (preferred)

Benefits

Comp & perks
  • A company committed to our inclusive value through our Employee Resource Groups
  • Work/life balance
  • Professional training resources
  • Creative problem-solving and the ability to tackle unique, complex projects
  • Volunteer Opportunities through “Optiv Chips In”
  • The ability and technology necessary to productively work remotely/from home (where applicable)