Peregrine
Governance, Risk & Compliance (GRC) Analyst (NYC or Washington D.C.)
$150K–$165K
Washington, D.C. +2 · Full-time · Posted Oct 30, 2026
- Location
- Washington, D.C.
New York, New York, United States
Washington, District of Columbia, United States - Experience
- 7–10 years in information security, compliance, or risk management within regulated industries.
About the job
Supports and improves Peregrine’s security and compliance program, maintaining regulatory, contractual, and operational standards for data protection, privacy, and security.
What you'll do
- Track and improve compliance frameworks; manage documentation, audits, and evidence collection.
- Collaborate with teams to maintain security policies, procedures, and controls, including access management and incident response.
- Support audit readiness and customer and vendor compliance inquiries; help apply IAM, MFA, and least-privilege principles.
What they ask for
- Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53, or similar frameworks.
- Understanding of cloud-native SaaS environments, microservices, VPCs/VPNs, and identity concepts such as RBAC and MFA.
- Detail-oriented, collaborative, and able to communicate security concepts clearly.
- Based in NYC or Washington D.C. with a 4-day-per-week in-office requirement.
Nice to have
- Certifications including CGRC, CISSP, CISA, CIPP/US, HCISPP, CompTIA Security+, CCSP, CCSK, AWS Security – Specialty, AWS Solutions Architect – Associate, or CompTIA Cloud+.
- Experience with public safety, justice, government agencies, or other highly regulated data environments; familiarity with CJIS, SOC-2, or overlapping control frameworks.
Pay
$150,000 — $165,000 USD (annual salary)
Tools
SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, FedRAMP, AWS
Model-written summary · the original posting is authoritative