WHO YOU’LL WORK WITH The GRC Information Security Analyst 1 works with the ITC GRC Director and collaborates with the Global GRC team at PHK in Beaverton, Oregon. This role is designed as an Analyst 1 GRC Athlete—an entry-level position executing intake, hygiene, and support tasks in whichever stream (Governance, Risk, Compliance, or Technical Recovery) is needed, while learning the GRC discipline under close guidance from Seniors, Leads, and Principals. WHO WE ARE LOOKING FOR We are looking for an entry-level analyst who is eager to launch a career in Governance, Risk, and Compliance. You bring self-initiative, a willingness to learn, and the discipline to close loops on standard tasks with review from more senior teammates. You are comfortable working within established procedures, using fact-finding and basic analysis to solve problems that fit within normal operating processes. Experience — 0–1 years of professional • experience in cybersecurity, IT audit, compliance, technology risk, or GRC. Recent graduates, internships, co-ops, and rotational-program candidates encouraged. GRC Athlete willingness — Genuine interest in learning across all four streams (Governance, Risk, Compliance, Technical Recovery); willing to pick up work in the stream where the demand is highest with a playbook and coaching. Governance basics — Awareness of risk register, policy, and controls concepts; willingness to build depth in ServiceNow GRC. Compliance basics — Awareness of IT controls, evidence, and testing concepts (SOX ITGC exposure through coursework, internship, or certification is a plus). Cybersecurity frameworks (awareness) — Introductory awareness of NIST CSF, ISO 27001, or comparable frameworks; willingness to build depth. Risk & remediation basics — Willingness to track issues, chase evidence, and follow up to closure; able to keep clean records under guidance.