FewerJobs.
All jobs

GRC Analyst, Federal & Customer Programs

Spire Law - Boulder, Colorado, United States

Posted Jun 4, 2026

Benefits

Parental leave
Not verified
Non-birth-parent leave
Not verified
Family-building benefits
  • Fertility benefits: Not verified
  • Adoption assistance: Not verified
  • Surrogacy assistance: Not verified
Mental health support
Offered not verified - source URL not recorded; timestamp not recorded
Relocation assistance
Not verified
Childcare support
Not verified
Learning budget
Offered not verified - source URL not recorded; timestamp not recorded
Verification
Not verified
Salary
$189K-$225K not verified - timestamp not recorded
401(k) match
Not verified

Was this benefit information wrong? Tell us.

Schedule

Shift type
Not verified
Weekend work
Not verified

Application

Cover letter
Not verified
Assessment
Not verified
Deadline
Not stated

Where they hire

State eligibility is not yet verified.

About this role

GRC Analyst, Federal & Customer Programs Boulder, Colorado, United States About the Role: The GRC Analyst, Federal & Customer Programs is responsible for the hands-on analysis, documentation, and operational execution of the company's security governance, risk, and compliance obligations. This role sits at the intersection of customer contracts, regulatory frameworks, and the company's security control environment - translating external requirements into clear, traceable internal commitments and evaluating how well current capabilities satisfy them. The GRC Analyst reviews incoming contractual security language, maps obligations to applicable frameworks and existing controls, produces compliance matrices and gap analyses, owns the operational risk assessment process, contributes to governance and policy lifecycle activities, and supports audit, assessment, and customer inquiry activities. A meaningful portion of this role is dedicated to ongoing contract and requirements analysis as new programs are awarded and existing programs evolve. The GRC Analyst serves as the security function's primary reviewer of incoming contractual cybersecurity language and works directly with legal and sourcing on flow-down negotiation and redlines. Candidates who enjoy careful reading of contractual and regulatory text - and who want this to be a substantial part of their day-to-day work - will find this role a strong fit. This is a detail-oriented, writing-intensive role requiring strong analytical judgment, fluency across multiple compliance frameworks, and the ability to work effectively with legal, sourcing, program management, engineering, and security operations stakeholders. Key Responsibilities: Contract & Requirements Analysis Review customer contracts, statements of work, security annexes, CDRLs, data protection addenda, and flow-down clauses

Read the full description at spire.com. FewerJobs shows a preview and links to the original posting.

Apply at spire.com

Apply link not verified; last-live date unavailable.

What verified means

Verified means a displayed claim has recorded source fields, a user-resolvable source, and a full check date.

Related jobs