Analyst – vGRC, Virtual Governance, Risk, and Compliance

Tevora

. Support clients with Governance, Risk, and Compliance programs, audit support, policy and procedure development, and Information Security best practices .

Posted 10/26/2026full-timeUnited StatesMid-LevelSenior💰 $94,500 - $105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Governance, Risk, and Compliance programs, with a strong focus on Sarbanes-Oxley audits and IT General Controls. Proficient in developing policies, conducting compliance reviews, and communicating effectively across technical and business domains.

Highest-signal resume keywords

Sarbanes-Oxley AuditsIT General Controls (ITGCs)Compliance Frameworks (ISO 27001, SOC 2, PCI-DSS)Accounting or IT Certification (CPA, CISSP, CISA)Information Security Best Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Governance ProgramsRisk AssessmentsCompliance ReviewsPolicy DevelopmentTechnical DocumentationAudit CoordinationEvidence CollectionDisaster Recovery PlansInformation Security ControlsClient Engagement Management

Soft Skills

Effective CommunicationProblem SolvingIndependent WorkProject ManagementClient Needs Analysis

Certifications & Qualifications

CPACISSPCISACISMCRISC

Industry Keywords

GovernanceRisk ManagementComplianceInformation SecurityAudit SupportIT Security ConceptsHybrid Work EnvironmentCross-Functional TeamsExecutive-Level ReportingInternal/External Audits

About the role

Key responsibilities & impact

Support clients with Governance, Risk, and Compliance programs, audit support, policy and procedure development, and Information Security best practices
Drive successful completion of Sarbanes-Oxley audits focused on ITGCs
Coordinate and manage clients during internal or external audits
Conduct control compliance reviews, evidence collection, and audit work coordination
Lead or support compliance and risk assessments and guide junior resources
Interview clients to analyze information security controls or risk and identify recommendations
Execute multiple client engagements simultaneously
Communicate technical and process-improvement requirements to project stakeholders
Assist with developing customized policies, procedures, controls, disaster recovery plans, and other documentation
Work with cross-functional teams to provide InfoSec compliance support
Perform additional duties as assigned

Requirements

What you’ll need

Direct experience with ITGCs of SOX, including either external or internal audit role
Effective communication across business and technical boundaries
Ability to work independently without detailed guidance, anticipate next steps, and solve problems
Understanding and predicting customer and project needs
Ability to balance project timelines and prioritize differing client needs
Proficiency in writing executive-level reports and technical documentation
Comprehensive knowledge of common IT and security concepts
At least one Accounting, Risk, or IT certification held or in process, such as CPA, CISSP, CISA, CISM, or CRISC
Bachelor's Degree from an accredited 4-year university
Minimum 3 years of experience in information security, information technology, business consulting, enterprise risk, or compliance
Direct experience with at least one compliance framework in addition to SOX: ISO 27001, SOC 2, SOC 1, or PCI-DSS
Eligibility to work in the United States
Must be available to work a hybrid schedule at the Irvine, CA office

Benefits

Comp & perks

Comprehensive benefits offering
Group Medical, Dental, and Vision insurance
Life insurance
FSA options
Paid time off and holidays
401k with Company match
Vibrant work culture