Governance, Risk, and Compliance (GRC) Analyst Job at ACT Consulting, Inc., Los Angeles, CA

N3ZLQnFtcFY2aXRNREhkUkMwM21CaE1udFE9PQ==
  • ACT Consulting, Inc.
  • Los Angeles, CA

Job Description

ACT Consulting has an immediate need for a Third Party Governance, Risk, and Compliance (GRC) Analyst
role located in Los Angeles, CA with our client.


ACT Consulting is a leader in the staffing industry providing candidates on a national basis for contract, contract to hire, and direct hire engagements while maintaining the highest regard for people, integrity, and customer satisfaction. Our clients are mostly Fortune 1000 companies, primarily in the areas of Information Technology, Engineering, Professional, Accounting and Finance.


Please take a moment to review the job description. If this is something you are interested in, please send a copy of your resume to mark@act-info.com or contact me directly at 203-302-0562.

Job Title: Third Party Governance, Risk, and Compliance (GRC) Analyst
Location: Los Angeles, CA
Job Type: Full-Time (Permanent)
Salary: $120,000

Position Overview:
Our client, a top-ranked AM Law 100 firm, is seeking a Third Party Governance, Risk, and Compliance (GRC) Analyst to join its Information Security team. This position plays a vital role in overseeing the Third Party GRC program, with a strong emphasis on Third Party Risk Management (TPRM) , Client Compliance , and IT Risk Management .
The Analyst will manage and support the full GRC lifecycle related to third-party vendors-from onboarding due diligence to ongoing monitoring-ensuring compliance with internal policies, client obligations, and regulatory standards.

Key Responsibilities:
  • Manage the full lifecycle of Third-Party Risk Management , from onboarding through offboarding.
  • Conduct initial and periodic risk assessments on third-party vendors to evaluate privacy, cybersecurity, and operational risks.
  • Collect, review, and analyze vendor due diligence materials, including:
    • SIG questionnaires
    • SOC 1/SOC 2 reports
    • Security and privacy policies
  • Coordinate internally and externally to address, track, and remediate identified risks .
  • Assess vendor cybersecurity controls and ensure alignment with the firm's risk management framework .
  • Partner with Contracts and Procurement teams to review and approve third-party engagements.
  • Support client compliance requests , including RFP and security questionnaire responses.
  • Maintain and report on key risk indicators (KRIs) and performance metrics .
  • Participate in continuous improvement initiatives, including automation of GRC workflows.
  • Monitor and interpret evolving regulatory and industry standards, such as:
    • GDPR , CCPA
    • NIST Cybersecurity Framework
    • ISO 27001
  • Deliver GRC awareness and training to internal teams.
  • Contribute to ad hoc projects and overall GRC program maturity.

Required Qualifications:
  • Minimum 3 years of professional experience in:
    • Third Party Risk Management
    • GRC (Governance, Risk, and Compliance)
    • Information Security Risk
  • Prior work experience in regulated industries such as:
    • Legal, Finance, or Consulting (Big 4 preferred)
  • Solid understanding of:
    • GRC principles , risk frameworks, and compliance obligations
    • Privacy and security standards (e.g., NIST, ISO, GDPR, CCPA)
  • Strong documentation and analytical skills with the ability to manage complex risk scenarios.
  • Excellent interpersonal and communication skills to interact with stakeholders across business units.
  • Highly organized, detail-oriented, and capable of working independently in a fast-paced environment.
  • Proficiency in tools such as:
    • Excel , Confluence , and vendor risk assessment platforms (e.g., Archer, OneTrust, ProcessUnity, etc.)

Candidate Requirements:
  • Only candidates with stable, long-term job histories will be considered.
  • Candidates must have experience in finance, legal, consulting , or similarly highly regulated industries .
  • Demonstrated ability to manage risk and compliance activities with limited supervision .
  • Strong preference for candidates who can hit the ground running and contribute from day one.

Job Tags

Permanent employment, Full time, Contract work, Work experience placement, Immediate start,

Similar Jobs

Codeworks IT Careers

VMS Consultant Job at Codeworks IT Careers

 ...relationships. Who Were Looking For: Contingent Workforce VMS Consultant for VNDLY Vendor Management System. c2c candidates not being...  ...considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship... 

Marriott International, Inc

Massage Therapist Job at Marriott International, Inc

 ...Part Time Located Remotely? N Position Type Non-Management POSITION SUMMARY Provide massage services to guests using props and/or products. Provide body treatments to guests using body scrubs, wraps, and/or hydrotherapy. Assess guest needs and inquire... 

TDS Telecom

Outside Plant Construction Specialist Job at TDS Telecom

 ...radius of Eau Claire, WI. The Outside Plant Construction Specialist is responsible for coordinating, planning, and supervising...  ...required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust... 

Host Healthcare

Travel PICU Registered Nurse Job at Host Healthcare

 ...Job Description Host Healthcare is seeking a travel nurse RN ICU - Intensive Care Unit for a travel nursing job in Moreno Valley, California...  ...-free stipend amount to be determined. Posted job title: RN - PICU About Host Healthcare At Host Healthcare, we provide a... 

Monster

Database Administrator Job at Monster

 ...Design, create, implement and maintain databases in MS SQL and MS Access applications. Design...  ...services. Position Name: Database Administrator Location: Baltimore, Maryland Hours: 8...  ...of Microsoft SQL Server, MS Access and Oracle related products Database design and implementation...