H-1B Visa Grc Analyst Jobs
GRC Analyst roles qualify as H-1B visa specialty occupations under USCIS guidelines, requiring at least a bachelor's degree in information security, risk management, or a related field. Financial services, healthcare, and tech firms file LCAs with the DOL to sponsor GRC hires, making employer selection a critical first step.
Find H-1B Visa Grc Analyst JobsOverview
Showing 5 of 59+ Grc Analyst jobs
See all 59+ Grc Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Grc Analyst roles.
Get Access To All JobsINTRODUCTION
At Community Financial System, Inc. (CFSI), we are dedicated to providing our customers with friendly, personalized, high-quality financial services and products. Our retail division, Community Bank, N.A., operates more than 200 customer facilities across Upstate New York, Northeastern Pennsylvania, Vermont and Western Massachusetts. Beyond retail banking, we also offer commercial banking, wealth management, investment management, insurance and risk management, and benefit plan administration.
Just as our employees are committed to helping our customers manage their finances, we’re committed to our employees. After all, they make it happen for our customers every day.
To ensure our people can enjoy long and successful careers here at CFSI, we offer competitive compensation, great benefits, and professional development and advancement opportunities. As an equal-opportunity workplace and affirmative-action employer, we celebrate and support a diverse workplace for the benefit of all: our employees, customers and communities.
Responsibilities
Support CFSI’s third-party risk management program by administering the vendor due diligence portal, responding to inquiries and completing questionnaires provided by our customers and prospects regarding our information security controls, conducting information security due diligence assessments of new and existing vendors, and partnering with Enterprise Risk Management to strengthen the overall third-party risk framework. This role also supports AI Governance activities related to third-party AI solution evaluations, ongoing monitoring of approved relationships, and governance processes involving internally developed AI and agent solutions, in alignment with guidance established by the AI Governance Committee.
Essential Duties:
- Administer and maintain the third-party due diligence portal, ensuring current content, standard responses, supporting documentation, and security artifacts remain aligned with internal policies and controls.
- Coordinate, complete, and track information security questionnaires from customers, partners, auditors, and other authorized third parties.
- Partner with stakeholders across various business lines to gather responses and supporting evidence.
- Perform information security due diligence reviews of new and existing vendors through review of SOC reports, questionnaires, policies, penetration test summaries, business continuity materials, and other documentation to assess security posture, control environments, data protection practices, regulatory considerations, and overall risk.
- Identify, document, and communicate information security risks, control gaps, due diligence findings, and remediation recommendations to support management and governance decision-making.
- Support AI Governance activities related to third-party AI solution evaluations, ongoing monitoring of approved use cases, and governance processes involving internally developed AI and agent solutions, in alignment with guidance established by the AI Governance Committee.
- Support enhancements to third-party risk processes, standards, reporting, workflows, templates, metrics, and ongoing monitoring activities.
- Support identity and access management governance, review, and related coordination activities as assigned.
- Track remediation items, follow-up actions, and review outcomes to support timely resolution.
- Maintain organized assessment records, questionnaires, exceptions, and supporting documentation in accordance with policy and regulatory expectations.
- Support audits, examinations, and internal reviews related to vendor management, information security due diligence, and AI Governance oversight.
- Perform other Information Security, third-party risk, and related governance duties as assigned by management.
Ancillary Duties:
As an integral member of CFSI, this position is responsible to provide assistance wherever necessary to help the Branches and the Bank in achieving their annual goals. This may include traveling to other branches in the area to provide support as needed and to ensure proper staffing and service levels.
QUALIFICATIONS
Education, Training & Requirements:
- Bachelor’s Degree required in Information Security, Cybersecurity, Information Technology or equivalent experience considered
Skills:
- Strong analytical and communication skills.
- Proficient in conducting third-party information security due diligence, including reviewing SOC reports, penetration tests, and security questionnaires.
- Familiarity with risk assessment frameworks (e.g., NIST, SIG, CIS) and emerging AI governance guidelines.
- Ability to work independently and collaboratively to identify, document, and communicate security risks.
Experience:
- 4+ years of experience in Information Security; OR
- 4+ years of experience in Risk Management or Third-Party Risk Management (TPRM) with a strong focus on Information Security and GRC; OR
- 4+ years of experience in Information Technology with a dedicated focus on Security or GRC.
- Experience or familiarity with emerging technology risk frameworks (such as AI Governance or the NIST AI Risk Management Framework) is highly desired.
- Financial industry experience (e.g., familiarity with GLBA, FFIEC, or FDIC guidelines) is preferred but not required.
- All applicants must be 18 years of age or older.
COMPENSATION
- Min: USD $28.85/Yr.
- Max: USD $47.54/Yr.
Other Job Information:
Hours: 40 hours per week
Compensation: Commensurate with experience plus potential for annual merit increase. In addition to your competitive salary, you will be rewarded benefits including: 11 paid holidays, paid vacation, Medical, Vision & Dental insurance, 401K with generous match, Pension, Tuition Reimbursement, Banking discounts and the list goes on!
Physical Requirements:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee may be required to stand, walk, sit, use hands to finger, handle, or feel, reach with hands or arms, and speak and hear. The employee may occasionally be required to lift and or move up to 25 pounds. Specific vision abilities required by this job include close vision, and the ability to focus.
INTRODUCTION
At Community Financial System, Inc. (CFSI), we are dedicated to providing our customers with friendly, personalized, high-quality financial services and products. Our retail division, Community Bank, N.A., operates more than 200 customer facilities across Upstate New York, Northeastern Pennsylvania, Vermont and Western Massachusetts. Beyond retail banking, we also offer commercial banking, wealth management, investment management, insurance and risk management, and benefit plan administration.
Just as our employees are committed to helping our customers manage their finances, we’re committed to our employees. After all, they make it happen for our customers every day.
To ensure our people can enjoy long and successful careers here at CFSI, we offer competitive compensation, great benefits, and professional development and advancement opportunities. As an equal-opportunity workplace and affirmative-action employer, we celebrate and support a diverse workplace for the benefit of all: our employees, customers and communities.
Responsibilities
Support CFSI’s third-party risk management program by administering the vendor due diligence portal, responding to inquiries and completing questionnaires provided by our customers and prospects regarding our information security controls, conducting information security due diligence assessments of new and existing vendors, and partnering with Enterprise Risk Management to strengthen the overall third-party risk framework. This role also supports AI Governance activities related to third-party AI solution evaluations, ongoing monitoring of approved relationships, and governance processes involving internally developed AI and agent solutions, in alignment with guidance established by the AI Governance Committee.
Essential Duties:
- Administer and maintain the third-party due diligence portal, ensuring current content, standard responses, supporting documentation, and security artifacts remain aligned with internal policies and controls.
- Coordinate, complete, and track information security questionnaires from customers, partners, auditors, and other authorized third parties.
- Partner with stakeholders across various business lines to gather responses and supporting evidence.
- Perform information security due diligence reviews of new and existing vendors through review of SOC reports, questionnaires, policies, penetration test summaries, business continuity materials, and other documentation to assess security posture, control environments, data protection practices, regulatory considerations, and overall risk.
- Identify, document, and communicate information security risks, control gaps, due diligence findings, and remediation recommendations to support management and governance decision-making.
- Support AI Governance activities related to third-party AI solution evaluations, ongoing monitoring of approved use cases, and governance processes involving internally developed AI and agent solutions, in alignment with guidance established by the AI Governance Committee.
- Support enhancements to third-party risk processes, standards, reporting, workflows, templates, metrics, and ongoing monitoring activities.
- Support identity and access management governance, review, and related coordination activities as assigned.
- Track remediation items, follow-up actions, and review outcomes to support timely resolution.
- Maintain organized assessment records, questionnaires, exceptions, and supporting documentation in accordance with policy and regulatory expectations.
- Support audits, examinations, and internal reviews related to vendor management, information security due diligence, and AI Governance oversight.
- Perform other Information Security, third-party risk, and related governance duties as assigned by management.
Ancillary Duties:
As an integral member of CFSI, this position is responsible to provide assistance wherever necessary to help the Branches and the Bank in achieving their annual goals. This may include traveling to other branches in the area to provide support as needed and to ensure proper staffing and service levels.
QUALIFICATIONS
Education, Training & Requirements:
- Bachelor’s Degree required in Information Security, Cybersecurity, Information Technology or equivalent experience considered
Skills:
- Strong analytical and communication skills.
- Proficient in conducting third-party information security due diligence, including reviewing SOC reports, penetration tests, and security questionnaires.
- Familiarity with risk assessment frameworks (e.g., NIST, SIG, CIS) and emerging AI governance guidelines.
- Ability to work independently and collaboratively to identify, document, and communicate security risks.
Experience:
- 4+ years of experience in Information Security; OR
- 4+ years of experience in Risk Management or Third-Party Risk Management (TPRM) with a strong focus on Information Security and GRC; OR
- 4+ years of experience in Information Technology with a dedicated focus on Security or GRC.
- Experience or familiarity with emerging technology risk frameworks (such as AI Governance or the NIST AI Risk Management Framework) is highly desired.
- Financial industry experience (e.g., familiarity with GLBA, FFIEC, or FDIC guidelines) is preferred but not required.
- All applicants must be 18 years of age or older.
COMPENSATION
- Min: USD $28.85/Yr.
- Max: USD $47.54/Yr.
Other Job Information:
Hours: 40 hours per week
Compensation: Commensurate with experience plus potential for annual merit increase. In addition to your competitive salary, you will be rewarded benefits including: 11 paid holidays, paid vacation, Medical, Vision & Dental insurance, 401K with generous match, Pension, Tuition Reimbursement, Banking discounts and the list goes on!
Physical Requirements:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee may be required to stand, walk, sit, use hands to finger, handle, or feel, reach with hands or arms, and speak and hear. The employee may occasionally be required to lift and or move up to 25 pounds. Specific vision abilities required by this job include close vision, and the ability to focus.
See all 59+ H-1B Visa Grc Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Grc Analyst Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Grc Analyst
Map your degree to GRC frameworks
USCIS scrutinizes whether your degree field directly relates to GRC work. Degrees in cybersecurity, information systems, or accounting satisfy the specialty occupation standard more cleanly than general business degrees, which can trigger an RFE.
Search LCA filings for active GRC sponsors
Use the OFLC Wage Search to filter Labor Condition Application filings by SOC code 15-1299 or 13-1199. Companies with recent, approved GRC-related LCAs are already familiar with the filing process and actively hiring sponsored roles.
Target regulated industries with compliance mandates
Banks, insurers, and healthcare systems face HIPAA, SOX, and PCI-DSS requirements that make GRC Analysts operationally essential. These employers sponsor H-1B visas more consistently than companies where GRC is an optional function.
Find verified H-1B GRC employers on Migrate Mate
Filter by GRC Analyst roles with confirmed H-1B filing history on Migrate Mate. This surfaces employers who have cleared the LCA process before, cutting out companies that decline to sponsor after interviews.
Confirm wage level before accepting an offer
Your employer's LCA must certify a wage at Level I through Level IV under DOL's prevailing wage rules. GRC Analysts with risk or audit specializations often qualify at Level II or III, so verify the offered wage matches or exceeds the certified level before signing.
Negotiate premium processing into your offer
USCIS premium processing upgrades I-129 adjudication to 15 business days. For GRC roles tied to audit cycles or compliance deadlines, getting this added to your offer letter ensures your start date doesn't slip due to standard processing backlogs.
H-1B Visa Grc Analyst: Frequently Asked Questions
Does a GRC Analyst role qualify as an H-1B specialty occupation?
Yes. USCIS treats GRC Analyst positions as specialty occupations when the employer requires at least a bachelor's degree in a directly related field, such as information security, risk management, computer science, or accounting. Roles tied to specific frameworks like ISO 27001, NIST, or SOX compliance support this classification because the technical and regulatory depth involved requires specialized academic training.
Which employers typically sponsor H-1B visas for GRC Analyst positions?
Financial institutions, health systems, defense contractors, and large technology companies are the most consistent H-1B sponsors for GRC roles, because they operate under regulatory regimes that require ongoing compliance staffing. Consulting firms with dedicated risk and compliance practices also sponsor frequently. You can filter for employers with confirmed H-1B GRC filing history on Migrate Mate rather than applying broadly.
What SOC code applies to GRC Analyst roles for the H-1B LCA?
GRC Analyst positions are most commonly filed under SOC code 15-1299 (Computer Occupations, All Other) for technology-focused GRC work, or 13-1199 (Business Operations Specialists, All Other) for risk and compliance-heavy roles. The SOC code your employer selects determines the prevailing wage level USCIS and DOL will reference, so confirm which code the LCA uses before your petition is filed.
Can I change GRC Analyst employers after my H-1B is approved?
Yes, under H-1B portability rules established by AC21, you can transfer to a new employer once your petition has been pending for 180 days or longer, as long as the new role is in the same or a similar occupational classification. Your new employer must file a new I-129 before your current status expires. GRC roles with similar compliance or risk functions generally satisfy the same-or-similar standard.
How does the H-1B lottery affect GRC Analyst job seekers?
GRC Analysts subject to the annual cap must be selected in the USCIS lottery before an employer can file a full petition. The lottery runs each spring for October 1 start dates, and selection is random. Cap-exempt employers, including universities, nonprofit research organizations, and certain government contractors, can file year-round without waiting for lottery results, which makes them worth targeting if you need faster authorization.