🚀 Why This Role is Worth Your Time

Compliance isn’t the “boring paperwork” side of business anymore — it’s mission-critical. Deloitte is looking for a GRC Analyst who can turn risk frameworks into action. From assessing IT controls to ensuring regulatory requirements are met, you’ll play the watchdog role that keeps Fortune 500 companies secure, compliant, and audit-ready. If you’re detail-obsessed but also love solving big problems, this is your chance to make risk management exciting.

📌 At a Glance

Detail
Info

Estimated Salary Range
$70,000 – $110,000/year (varies by market, experience & certifications)

Location
Multiple US locations / Hybrid options depending on client team

Key Tools & Frameworks
RSA Archer, ServiceNow GRC, NIST, ISO 27001, SOX, HIPAA, PCI DSS

Ideal Background
IT audit, compliance, or risk consulting experience

Certifications That Help
CISA, CRISC, CISSP, CISM, or other GRC-focused certs

📋 Official Job Description (Deloitte)

(Insert Deloitte’s current official GRC Analyst description here — typically includes responsibilities like conducting risk assessments, supporting audits, evaluating controls, and ensuring compliance with regulations. It will also include their Equal Opportunity Employer statement.)

✔️ What You’ll Do

• Perform risk and compliance assessments across IT systems, applications, and processes.

• Review and evaluate internal controls against frameworks (NIST, ISO, SOX, etc.).

• Support clients during regulatory audits and internal reviews.

• Document risks, gaps, and remediation strategies.

• Collaborate with cross-functional teams to improve governance processes.

• Help design, implement, and maintain GRC tools like Archer or ServiceNow.

• Translate compliance requirements into actionable tasks for business and IT leaders.

🧰 Skills & Experience That Stand Out

• 2–4+ years of IT audit, risk management, or compliance experience.

• Familiarity with security regulations (SOX, HIPAA, PCI DSS, GDPR).

• Understanding of enterprise risk management frameworks.

• Strong Excel/Power BI or reporting skills.

• Ability to communicate risk findings clearly to both technical and business leaders.

• Bonus: hands-on with GRC software (Archer, ServiceNow, MetricStream).

🌟 Why Deloitte?

• Work with some of the world’s largest clients on real GRC challenges.

• Access to cutting-edge training and certifications.

• Growth opportunities into consulting, cyber risk, or leadership roles.

• Collaborative culture and emphasis on continuous learning.

✅ Think You’re Ready? Next Steps

• Update your resume with examples of risk assessments, audits, or compliance projects.

• Be ready to discuss how you’ve identified and mitigated risks in past roles.

• Apply through Deloitte’s careers portal or via this DamnJobs posting.

• Also check out related roles like Cyber Risk Analyst, IT Auditor, or Compliance Specialist.