The posting
Want to be a bswifter?
At bswift we’ve been transforming benefits administration since 1996, making it simpler, smarter, and more human. Our state-of-the-art, cloud-based technology and services empower employees to understand, manage, and love their benefits. From downtown Chicago, and remotely across the country, we serve thousands of companies and millions of people nationwide, reducing administrative burdens and freeing HR teams to focus on creating thriving, people-first workplaces.
We’re looking for motivated and goal-driven individuals who share our passion for delivering excellence and creating solutions that make a difference. The reward is a fun, flexible and creative environment with ample opportunity for professional and personal growth. If you love the bswift values of pursue excellence, embrace accountability, deliver superior service, and be a great place to work, we want to hear from you!
ABOUT US
bswift is a leading benefits administration company that specializes in providing tailored solutions for our clients. Our mission is to simplify the complex world of employee benefits and deliver exceptional service to our clients. We are seeking a motivated and detail-oriented GRC Analyst to join our Information Security team.
WHAT YOU’LL DO
The GRC Analyst is a member of the Information Security team and is responsible for supporting governance, risk, compliance, and client assurance activities. This role serves as a key partner to Sales, Client Experience, Legal, Product, and Information Security teams by responding to customer security inquiries, supporting audit and compliance efforts, and maintaining processes that support security and regulatory obligations.
The ideal candidate possesses a strong foundation in information security concepts, excellent written communication skills, and the ability to translate complex technical information into clear, concise, customer-friendly responses. This individual thrives in a deadline-driven environment, enjoys collaborating across teams, and demonstrates strong attention to detail, organization, and follow-through.
WHAT YOU WILL BE RESPONSIBLE FOR (Essential Functions)
Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.
Client Assurance & Security Questionnaire Management
- Serve as a primary point of contact for client assurance requests, including security questionnaires, due diligence inquiries, RFP security sections, SOC reports, bridge letters, penetration test summaries, and other security-related documentation.
- Review and respond to detailed client security questionnaires by interpreting requirements and providing accurate, defensible responses aligned with company policies and security practices.
- Partner with Sales, Client Experience, Legal, Product, and Information Security teams to gather information and respond to customer security inquiries within established service-level expectations.
- Utilize approved security questionnaire and AI-enabled response tools to draft and refine responses while ensuring accuracy, consistency, and appropriate disclosure of information.
- Support the development, maintenance, and continuous improvement of reusable security response content and documentation.
Risk, Compliance & Audit Support
- Support internal and external audits, including SOC 2 and other compliance assessments, by coordinating evidence requests and assisting with control documentation.
- Collect, organize, and maintain audit-ready evidence supporting compliance initiatives and recurring review activities.
- Assist with governance, risk, and compliance processes designed to maintain adherence to security frameworks, internal controls, and regulatory requirements.
- Support remediation efforts by tracking action items and partnering with stakeholders to ensure timely resolution of identified issues.
User Access Review Administration
- Own and execute recurring User Access Reviews (UARs) for critical systems and applications.
- Coordinate with system owners and managers to validate that user access remains appropriate and aligned with least-privilege principles.
- Collect, maintain, and organize evidence supporting access review activities.
- Track remediation actions resulting from access reviews and partner with business and technical stakeholders to resolve identified exceptions.
Contract Review & Cross-Functional Partnership
- Support the review and negotiation of customer security addenda, contract language, and redlined security requirements.
- Partner with Legal and Information Security stakeholders to evaluate proposed contractual obligations and recommend appropriate revisions.
- Serve as a trusted advisor to internal business teams by providing guidance related to security controls, compliance requirements, and customer assurance requests.
Continuous Improvement
- Identify and implement opportunities to improve processes, documentation, automation, and reporting across the Governance, Risk, and Compliance program.
- Participate in broader governance and risk initiatives as security processes mature and become more automated.
- Contribute to ongoing program enhancement efforts that improve operational efficiency, consistency, and overall customer experience.
WHAT YOU NEED TO SUCCEED (Required Education and Experience)
- Bachelor’s degree in Cybersecurity, Information Systems, Business Administration, Risk Management, Accounting, or a related field, or an equivalent combination of education and work experience.
- Two (2) or more years of experience in information security, IT audit, governance, risk and compliance (GRC), security compliance, client assurance, or a related discipline.
- Working knowledge of information security and compliance concepts including: SOC 2 Access Management Least Privilege Segregation of Duties Disaster Recovery Data Protection Security Testing and Controls
- Experience interpreting questionnaires, gathering information from stakeholders, and preparing accurate and professional responses.
- Strong written communication skills with the ability to explain technical and compliance concepts to both technical and non-technical audiences.
- Exceptional attention to detail and the ability to manage multiple priorities and deadlines simultaneously.
- Strong organizational, documentation, and follow-up skills.
- Demonstrated initiative, accountability, and willingness to learn new technologies, products, and security requirements.
Skills & Abilities
- Strong analytical and problem-solving skills.
- Ability to manage multiple projects and deadlines in a fast-paced environment.
- Excellent interpersonal and collaboration skills.
- Ability to maintain confidentiality and exercise sound judgment when handling sensitive information.
- Strong proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, and Teams.
- Ability to work independently while effectively partnering across departments.
NICE TO HAVE (Preferred Education and Experience)
- Experience completing customer security questionnaires, due diligence requests, or security sections of RFPs.
- Experience supporting SOC 2 audits, IT audits, or compliance assessments.
- Experience administering access certification or user access review programs.
- Experience reviewing security contract language, security addenda, or contract redlines in partnership with Legal teams.
- Familiarity with GRC and security questionnaire management platforms such as SecurityPal, Archer, OneTrust, MetricStream, or similar tools.
- Background in IT audit, SOC auditing, risk management, compliance, or related disciplines.
- Experience in SaaS, healthcare technology, benefits administration, financial services, or other highly regulated industries.
- Relevant certifications such as CISA, CRISC, Security+, CISSP, or similar credentials.
OTHER DUTIES
Minimal travel may be required.
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice
Why Join bswift?
At bswift, we empower our employees to make a meaningful impact, innovate, and grow. Joining our team means stepping into a collaborative and dynamic environment that values creativity, initiative, and a passion for client success. We are dedicated to fostering an inclusive workplace that celebrates diversity and values each team member’s unique contributions.
Benefits of Working at bswift:
- Comprehensive Health Benefits: Access to health, dental, and vision plans to support your wellness and that of your family.
- Competitive Compensation: A compensation package that recognizes your skills, experience, and contributions, including performance-based incentives for most roles.
- Remote first, Office friendly environment! No time to commute? No problem!
- Retirement Savings Plans: Options to help you plan for a secure financial future with employer-sponsored retirement savings programs.
- Professional Development: Opportunities for career growth, including training and access to resources to support your career progression.
- Supportive Culture: A work environment that encourages collaboration, open communication, and creative problem-solving, where your voice and ideas are valued.
- Employee Wellbeing Initiatives: Programs focused on mental health, financial planning, and wellness resources to help you thrive inside and outside of work.
Make an Impact: At bswift, your work directly contributes to transforming how organizations approach benefits administration and client engagement. Join us to be part of an organization that is making a meaningful difference in the lives of our clients and their employees.
Specific benefit offerings vary by position and may be subject to change.
Standard working hours are 8am-5pm Central Time, unless otherwise stated in the Job Description.
In the spirit of pay transparency, we are excited to share the base salary range for this position is $90,000-$110,000, exclusive of fringe benefits or potential bonuses. If you are hired at bswift, your final base salary compensation will be determined based on factors such as geographic location, skills, education, and/or experience. In addition to those factors – we believe in the importance of pay equity and consider internal equity of our current team members as a part of any final offer. Please keep in mind that the range mentioned above is the full base salary range for the role. Hiring at the maximum of the range would not be typical in order to allow for future & continued salary growth. We also offer a generous compensation and benefits package!
At bswift, our mission is clear: Become the preeminent benefits administrator through exceptional people, innovative technology, and delighted customers. And our values are at the heart of everything we do to accomplish that mission. We Pursue Excellence, Embrace Accountability, Deliver Superior Service, and strive to Be A Great Place To Work. We take pride in having an engaged, collaborative team that goes the extra mile to get the job done right.
bswift has been regularly named one of Chicago’s Best and Brightest Companies to Work For®, as well as one of the Nation’s Best and Brightest Companies to Work For® year after year. We offer a fun, flexible, and creative environment where you can grow both professionally and personally.
If you have what it takes to join our award-winning culture, we’d love to hear from you!
