Cybersecurity GRC Analyst

Description: Follett Content Solutions has been a trusted partner for educators since 1873! We support our educators that touch more than 45 million students worldwide. Follett Content Solutions helps build a diverse collection of print and digital resources to support every student. We are currently hiring for Cybersecurity GRC Analyst. This position is an exempt full\-time position located in McHenry, IL or remote for the right person. The pay for this position is $!15,000\-$120,000 annually. We offer a hybrid work schedule with 3 days in the office (Monday, Tuesday \& Thursday) and 2 remote days (Wednesday \& Friday). The Cybersecurity GRC Analyst is responsible for strengthening the organization’s governance, risk, and compliance posture by formalizing IT policies, operationalizing Microsoft Purview, and ensuring audit readiness. This individual plays a critical role in aligning security practices with business risk, regulatory requirements, and industry frameworks such as SOC 2, NIST CSF, and PCI DSS. Serves as the primary point of contact for governance initiatives, including evidence collection, control mapping, and coordination with external auditors and consultants. Develops and maintains policies, standards, and procedures across device management, identity, and data handling. Oversees data classification, DLP, insider risk, and compliance reporting through Microsoft Purview. Partners with the Cybersecurity Specialist and SOC provider to integrate governance with operational telemetry. Tracks remediation activities, supports risk assessments, and ensures timely closure of audit findings. Maintains documentation for audit readiness and leadership reporting, enabling transparency and accountability across the organization. Leads annual cybersecurity awareness training efforts and promotes a culture of compliance. Monitors emerging regulatory trends and frameworks, recommending updates to policies, tools, and practices to ensure the organization remains resilient and compliant. Key Responsibilities: Governance \& Policy Development * Drafts, maintains, and enforces IT security policies, standards, and procedures across device management, identity, and data handling. * Operationalizes Microsoft Purview for data classification, DLP, insider risk, and compliance reporting. * Aligns governance practices with organizational risk appetite and regulatory requirements. * Ensures policies are auditable, scalable, and communicated effectively across the organization. Audit Readiness \& Compliance * Serves as primary point of contact for SOC 2 Type II certification efforts, coordinating evidence collection and control mapping. * Supports PCI DSS self\-assessment activities and other compliance initiatives. * Maintains documentation for audit readiness and leadership reporting. * Coordinates with external auditors, consultants, and vendors to ensure successful certification outcomes. * Tracks remediation plans and ensures timely closu