ZipStaff Inc.
Senior Governance, Risk & Compliance Analyst
Remote•United States•Full-time
$58 - $60 hourly
$58 - $60 hourly
About the Job
Job Title: Senior Governance, Risk & Compliance Analyst.
Location: Remote (100% U.S.) – U.S. Citizen or Green Card holder only.
Employment Type: Contract (W2 through Randstad).
Location: Remote (100% U.S.) – U.S. Citizen or Green Card holder only.
Employment Type: Contract (W2 through Randstad).
About the Opportunity:
ZipStaff is recruiting on behalf of our client for a hands-on Senior Governance, Risk, and Compliance (GRC) Analyst. The assignment is with a leading pharmaceutical company and focuses on supporting technology risk, regulatory compliance, audit activities, and control programs within complex enterprise environments.
ZipStaff is recruiting on behalf of our client for a hands-on Senior Governance, Risk, and Compliance (GRC) Analyst. The assignment is with a leading pharmaceutical company and focuses on supporting technology risk, regulatory compliance, audit activities, and control programs within complex enterprise environments.
You bring a combination of GRC expertise and legal or paralegal experience, enabling you to review and interpret contracts, regulatory requirements, legal documents, policies, compliance obligations, and audit materials. You can identify relevant requirements, flag potential compliance concerns, and partner with Legal, Privacy, Security, Technology, and business stakeholders when legal interpretation or escalation is required. This is a fully remote role open only to U.S. Citizens or Green Card holders.
What You’ll Do:
- Support the execution and continuous improvement of the organization’s SOX ITGC program, with additional support for SOC 1, SOC 2, PCI DSS, NIST, FTC, HITRUST, CSI, DNU, and other applicable regulatory or compliance requirements.
- Support the development, review, maintenance, and implementation of GRC policies, standards, procedures, controls, and supporting documentation.
- Review legal, regulatory, contractual, and compliance documentation to identify obligations, control requirements, reporting requirements, deadlines, and potential compliance gaps.
- Translate relevant legal, contractual, and regulatory requirements into documented compliance requirements and control considerations in partnership with Legal and appropriate subject matter experts.
- Partner with control owners to ensure assigned controls are appropriately documented, implemented, supported by evidence, and prepared for testing.
- Support Governance, Risk, and Control activities including MCA testing, Continuity of Business readiness, risk assessments, audit support, and remediation tracking.
- Identify opportunities to improve documentation quality, control consistency, and compliance processes.
- Partner with Technology, Security, Legal, Privacy, Internal Audit, external auditors, compliance teams, and business stakeholders.
- Act as a liaison for assigned audit, regulatory, legal, and compliance requests, helping coordinate documentation and responses across stakeholders.
- Provide practical guidance to control owners regarding SOX ITGC, SOC requirements, risk management practices, evidence expectations, and documentation standards.
- Review contracts, agreements, addenda, statements of work, regulatory correspondence, policies, procedures, control documentation, audit requests, and other legal or compliance-related materials for relevant GRC requirements.
- Identify and document obligations related to information security, privacy, regulatory compliance, audit rights, record retention, business continuity, third-party risk, breach or incident notification, and control requirements.
- Coordinate day-to-day compliance activities, including walkthroughs, control testing support, document reviews, evidence collection, and audit response management.
- Track findings, remediation plans, regulatory commitments, contractual obligations, and compliance actions through closure.
- Provide guidance to junior team members and control owners on GRC processes, evidence requirements, documentation practices, and audit readiness.
Required Qualifications:
- 5+ years of experience in Governance, Risk & Compliance, Internal Audit, IT Risk Management, Technology Compliance, regulatory compliance, legal operations, paralegal work, or a related field.
- Experience reviewing legal, contractual, regulatory, or compliance documentation and identifying relevant requirements, obligations, risks, or areas requiring escalation.
- Experience supporting SOX IT General Controls (ITGC) or comparable control programs, including walkthroughs, testing coordination, evidence review, remediation tracking, or auditor engagement.
- Working knowledge of one or more frameworks or regulatory areas such as SOX 302/404, SOC 1, SOC 2, PCI DSS, NIST, HITRUST, FTC requirements, COSO, or COBIT.
- Experience partnering with Legal, Compliance, Security, Technology, Internal Audit, external auditors, or business control owners.
- Ability to interpret complex written requirements and convert those requirements into organized, actionable documentation.
- Strong analytical, research, written communication, and document-management skills.
- Strong attention to detail, particularly when reviewing contractual, regulatory, audit, and control documentation.
- Ability to manage multiple concurrent assignments and deadlines in a complex enterprise environment.
- Ability to recognize matters requiring Legal, Privacy, Security, or other subject-matter-expert review and escalate appropriately.
- Must be a U.S. Citizen or Green Card holder (no sponsorship).
- Ability to work fully remote.
Preferred Qualifications:
- Prior experience as a paralegal, senior paralegal, compliance analyst, legal operations analyst, regulatory analyst, or GRC analyst.
- Demonstrated experience reviewing contracts, regulatory documents, legal correspondence, policies, audit requests, or compliance obligations.
- Experience supporting contract or regulatory obligation management, including identifying requirements related to audit rights, security, privacy, record retention, incident notification, business continuity, or third-party risk.
- Experience mapping regulatory or contractual obligations to policies, standards, risks, controls, and evidence.
- Knowledge of SOX ITGC and SOC 1 / SOC 2 control environments.
- Familiarity with COSO, COBIT, NIST, and related governance and control frameworks.
- Experience operating within a first or second line of defense GRC function.
- Experience with enterprise GRC or audit platforms such as ServiceNow GRC/IRM, Archer, AuditBoard, or OneTrust.
- Experience researching regulatory requirements and supporting the implementation of corresponding policies or controls.
- Relevant certifications such as CISA, CRISC, CGRC, CIA, CISM, or paralegal certification.
- Bachelor’s degree in Legal Studies, Paralegal Studies, Business Administration, Information Systems, Cybersecurity, Accounting, Finance, Risk Management, or a related discipline, or equivalent professional experience.
- Paralegal certificate or demonstrated professional legal-document-review experience preferred.
Benefits: (through Randstad W2)
- Medical Insurance.
- Dental Insurance.
- Vision Insurance.
- 401(k) with company match.
- Paid Time Off.
- Referral Program.
- Weekly direct deposit.
About ZipStaff:
ZipStaff is recruiting on behalf of our client for this assignment. We focus on quality matches, clear communication, and long-term success for candidates and clients.
ZipStaff is recruiting on behalf of our client for this assignment. We focus on quality matches, clear communication, and long-term success for candidates and clients.
To apply, submit your resume highlighting your GRC, SOX ITGC, regulatory compliance, and legal/paralegal document review experience, plus relevant frameworks (SOX, SOC, PCI, NIST, etc.). Pure research or junior experience will not be considered. U.S. Citizen or Green Card holders only. Assignment is on Randstad W2 with a leading pharmaceutical company.