GRC analyst
| Highest | $6,200 / mo · United States |
|---|---|
| Experience | 2–4 yrs |
| Degree | Required |
| First paycheck | Immediately upon completing a Bachelor degree (4 years study) |
Pay in the destination countries
Monthly, in US dollars. Each country is an Imora admission package — open one for that route's fees, language requirement and deadline.
| Country | Monthly |
|---|---|
| United StatesTOEFL 80–100 · $10–70k | $6,200max |
| SwitzerlandIELTS 6.5 · CHF 0.9–8k | $5,950 |
| NetherlandsIELTS 6.0–6.5 · €8–20k | $5,950 |
| BelgiumIELTS 6.5 · EUR 1,100–4,500 | $5,950 |
| NorwayIELTS 6.0–6.5 · NOK 130–260k | $5,900 |
| SwedenIELTS 6.5 · SEK 90–295k | $5,900 |
What does the day look like?
A Cyber GRC (Governance, Risk and Compliance) analyst does not hack systems or break code. Only 5% of the job involves technical security reviews. The largest portion — about 45% of the day — is spent reviewing third-party vendor risk questionnaires (SIG, CAIQ), examining SOC 2 Type II reports, verifying screenshot evidence, and organizing audit spreadsheets.
Another 30% of the day is spent meeting with software engineers and business leaders to negotiate risk remediation deadlines. The remaining 20% involves drafting and updating security policies against frameworks like ISO/IEC 27001, GDPR, and NIST CSF 2.0. Daily tools include ServiceNow IRM, OneTrust, Drata, Vanta, Jira, and Microsoft Excel. The role runs on a standard 40-hour office week with no night shifts or weekend on-call rotations.
Where does this lead?
Next step up
People arrive from
What do you make of this job?