Security compliance (GRC) resume example
A person in this job proves to customers and auditors that a company handles data safely, and gets it through checks such as SOC 2. Below: an example to start from, and what 165 open postings for this work ask for today.
Alex Example
GRC Analyst
City, Country · [email protected]
Summary
GRC Analyst with five years of experience in security. Strongest in SOC 2 and ISO 27001, risk assessment and policy writing.
Skills
SOC 2 and ISO 27001, risk assessment, policy writing, audit evidence, SQL, Agile, Tableau
Experience
GRC Analyst, Example Company 2022 – now
- Led the SOC 2 audit: 84 controls, passed with no exceptions
- Automated evidence collection for 60 controls; audit preparation takes 2 weeks instead of 8
- Answered 150 customer security questionnaires a year with a median turnaround of 2 days
GRC Analyst, Another Example Ltd 2020 – 2022
- Assessed 90 suppliers; 7 were replaced or asked to close gaps
Education
Bachelor’s degree, Example University 2016 – 2020
Example. The person, the employers and the numbers are invented; replace them with yours.
Tools employers name
Postings for this work describe duties more than tools. These are the tools they do name; put on the resume the ones you have used.
Titles employers use
Senior GRC Engineer; Senior Security GRC Engineer; Senior GRC Analyst; Technology and Security Risk Director; Security Engineer, GRC; Security Risk Management Lead.
Make it yours
- Keep the form, change every fact. A verb first, what changed, one number.
- Use the posting’s words. The match checker shows which of them your resume lacks.
- Put the strongest result first. The resume review tells you what a first read finds.
Questions about a security compliance (GRC) resume
- Which skills should a security compliance (GRC) resume list?
- What the work consists of: SOC 2 and ISO 27001, risk assessment, policy writing, audit evidence, SQL. Postings for this work describe duties more than tools, so use the posting’s own words for each duty and put a result next to it.
- How long should it be?
- One page for up to ten years of experience, two at most. The first third of the first page decides whether the rest is read.
- Is this example a real person?
- No. The name, the employers and the numbers are invented to show the form: a verb first, one result, one number. Replace every line with your own.
Next: 165 open security compliance (GRC) jobs · all resume examples · the resume builder