Skip to content

GRC

Analyst – vGRC (virtual Governance, Risk, and Compliance)

Tevora logoTevora$94,500–$105,000/yrIrvine, CA, Fairfax, VAFull-timePosted 3w ago
Apply on Tevora (shows the role here)Tevora as an employer: salaries and roles

At its midpoint, $99.8k/yr, this role pays less than the $169k/yr midpoint for Governance, Risk & Compliance (GRC) openings today (usual band $148k–$300k/yr).

The full posting

Analyst – vGRC (virtual Governance, Risk, and Compliance)

at Tevora

Irvine, CA, or Fairfax, VA

If you haven't heard of Tevora, it's because we've done our job!

Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you

What's the role?

Tevora is seeking a passionate Information Security Consultant who has a solid balance between business acumen and technical expertise. Comfortable across various disciplines of information security, this analyst consultant will be responsible for supporting clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on InfoSec best practices.

A day in the life could include

  • Directly support clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on Information Security best practices.
  • Drive successful completion of Sarbanes-Oxley (SOX) audits as part of Client’s GRC team, focused on the ITGCs.
  • Coordinating and managing Clients regarding internal or external audits, including: Control compliance review
  • Evidence collection
  • Coordination of audit work
  • Leading or supporting compliance and risk assessments, including providing guidance to junior resources
  • Conducting interviews with clients to analyze their information security controls or risk and identify recommendations
  • Execute on multiple client engagements simultaneously
  • Communicating with project stakeholders to effectively convey requirements of technical and process improvements.
  • Assisting in the development of customized policies, procedures, controls, disaster recovery plans and other documentation for applications, systems, and infrastructure.
  • Working with cross functional teams to provide InfoSec compliance support, and maintaining communicating across groups
  • Additional duties as assigned

Necessary skills and qualifications

  • Direct experience with ITGCs of SOX, including either externa or internal audit role
  • Connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to offer recommendations as an expert with best practices.
  • Work independently without detailed guidance, including anticipating next steps and problem solving
  • Understanding and predicting customer and project needs
  • Ability to balance various project timelines and prioritize differing client needs
  • Be proficient in writing executive level reports and technical documentation.
  • Have comprehensive knowledge of common IT and security concepts, with a strong desire to expand knowledge base
  • At least one Accounting, Risk or IT certification held or in process (i.e., CPA, CISSP, CISA, CISM, CRISC).
  • Bachelor's Degree from an accredited 4-year university
  • Minimum 3 years of experience in the information security, information technology, business consulting, enterprise risk or compliance field.
  • Direct experience with at least one of the following compliance frameworks in addition to SOX: ISO 27001, SOC 2, SOC 1, SOX, or PCI-DSS

Bonus Points

  • Demonstrated experience as an Information Security Compliance Auditor
  • At least 2 years experience in client-facing role (e.g., consulting or external auditor)

Additional requirements

  • Eligibility to work in the United States.
  • Must be available to work a hybrid schedule at our Irvine, CA office.

We’ve got you covered!

  • Comprehensive benefits offering Group Medical, Dental, and Vision, Life insurance, and FSA options
  • Paid time off and holidays
  • 401k with Company match
  • Vibrant work culture

EEOC Statement

Tevora is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or other applicable legally protected characteristics.

Text as Tevora published it; last compared with the original on 13 Nov 2026.

Apply on Tevora (shows the role here)

The application

Your details and CV, then 14 questions.

Keep these to handCVLinkedIn (optional)X profile (optional)GitHub (optional)Portfolio (optional)Website (optional)
  1. 1.
    Which location are you applying for?Choose one · optional
  2. 2.
    Are you authorized to work in the U.S?Yes or no
  3. 3.
    Will you now or in the future require a work visa sponsorship?Yes or no
  4. 4.
    What is your highest level of education?Choose one: High School or Equivalent · Associates · Bachelors · Masters · Doctorate · Some College
  5. 5.
    What are your salary expectations?Short answer
  6. 6.
    Do you consent to receive SMS/text messages from Tevora regarding your job application and recruitment process? Standard message and data rates may apply. You can opt out at any time by replying STOP.Yes or no
  7. 7.
    How many years of relevant experience do you have in information security, IT, business consulting, enterprise risk, audit, or compliance?Choose one: Less than 3 years · 3-4 years · 5-7 years · 8+ years
  8. 8.
    What direct experience do you have with SOX IT General Controls (ITGCs)?Choose one
  9. 9.
    In addition to SOX, which framework(s) have you worked with directly? Select all that apply.Choose any: SOC 1 · SOC 2 · ISO 27001 · PCI DSS · Other framework · None of these
  10. 10.
    Which activities have you personally performed? Select all that apply.Choose any (9 choices)
  11. 11.
    Which best describes your client-facing experience?Choose one
  12. 12.
    Which accounting, risk, audit, or information security certifications do you currently hold or have in progress? Select all that apply.Choose any (8 choices)
  13. 13.
    What is your highest completed level of education?Choose one: Bachelor’s degree · Master’s degree or doctorate · Associate degree · High school diploma/GED · Other / degree in progress
  14. 14.
    Which work products have you authored or materially contributed to? Select all that apply.Choose any (7 choices)

Taken from Tevora's application form as it stood on 12 Nov 2026.

The employer: Tevora

Advises companies on security, risk and compliance; most of its 19 security postings are summer and winter 2027 internships in Irvine and Fairfax.

Pay and benefits: Paid internships and salaried consulting staff roles in Irvine or Fairfax.

Full postings from Tevora All Tevora openings on the board Tevora employer profile

Other security roles worth a look

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Tevora posts a security role

We read Tevora's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.