CoStar Group-logo
CoStar Group
·
July 23, 2026
Apply Now
This job has closed.

Associate GRC Analyst

Richmond, VA
Full-time
Hybrid
$75K/yr - $101K/yr
Entry Level
CoStar Group is a leading global provider of commercial and residential real estate information, analytics, and online marketplaces. They are seeking an Associate GRC Analyst to assist in evolving and growing their cybersecurity and IT governance program, focusing on day-to-day governance operations and collaborating with various stakeholders.
Apply Now

Responsibilities

  • Perform routine governance operations such as periodic user access reviews, triage of anomalous control alerts, and audit support
  • Support third-party risk assessments for new and existing vendors — distributing and reviewing security questionnaires and performing initial reviews of SOC reports or equivalent control attestations
  • Draft clear, well-organized written summaries of assessments, risk findings and recommendations for both technical and non-technical audiences
  • Help maintain our GRC tooling and records — keeping vendor inventories, assessment trackers, and supporting documentation current, organized, and audit-ready
  • Contribute to security-awareness efforts across the company, generating bespoke and culture-relevant information security awareness materials and communications that help build and reinforce a healthy security culture
  • Arrive ready to learn, grow, and develop your career within Cybersecurity, adopting a continuous learning mindset

Qualification

Required

  • Bachelor's Degree required from an accredited, not for profit, in person, university or college
  • A track record of commitment to prior employers
  • 1–3 years of experience in an adjacent field such as IT, audit, compliance, information security, or a related analytical or operational role
  • A genuine and demonstrated curiosity about technology and cybersecurity, paired with the self-motivation to take on unfamiliar challenges and see them through
  • Excellent written communication with meticulous attention to detail — you take pride in accurate, well-organized, polished work
  • Familiarity with core security concepts — for example, least privilege, defense in depth, the CIA triad (confidentiality, integrity, and availability), authentication versus authorization, encryption in transit and at rest, and common attack types such as phishing and social engineering
  • Strong organizational and time-management skills, with the ability to track many moving pieces without dropping detail
  • A collaborative, approachable style and a willingness to engage with people across the business

Preferred

  • Excellent verbal communication and presentation skills, with a proven track record of communicating clearly to diverse audiences, including both non-technical and highly technical stakeholders
  • Entry-level certifications, or demonstrable progress toward them, such as CompTIA Security+ or ISC2 Certified in Cybersecurity (CC)
  • Experience in a service-oriented technology role, such as an IT help desk or technical customer support function
  • Exposure to ticketing and workflow tools
  • Experience in developing automation – whether it is through standard scripting languages such as Python, PowerShell, or through applications such as Power Automate
  • Experience reading or summarizing SOC reports, security questionnaires (SIG, CSA CAIQ), or other vendor documentation
  • Hands-on experience applying AI to accomplish real work — for example, building or orchestrating agentic workflows, automating multi-step tasks, or integrating AI tools into business processes — rather than using AI as a substitute for a search engine

Benefits

  • Comprehensive healthcare coverage: Medical / Vision / Dental / Prescription Drug
  • Life, legal, and supplementary insurance
  • Virtual and in person mental health counseling services for individuals and family
  • Commuter and parking benefits
  • 401(K) retirement plan with matching contributions
  • Employee stock purchase plan
  • Paid time off
  • Tuition reimbursement
  • On-site fitness center and/or reimbursed fitness center membership costs (location dependent)
  • Access to CoStar Group’s Employee Resource Groups
  • Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks
CoStar Group (NASDAQ: CSGP) is the provider of commercial real estate information, analytics and marketing services.
Glassdoor
2.7
Founded in 1987
Arlington, Virginia, USA
5001-10000 employees
http://www.costargroup.com/
CoStar Group (NASDAQ: CSGP) is the provider of commercial real estate information, analytics and marketing services.
Glassdoor
2.7
Founded in 1987
Arlington, Virginia, USA
5001-10000 employees
http://www.costargroup.com/