EY
Security Policy Analyst
EY · New York, NY
Compensation
$59k–$76kper year
HybridFull-timeGovernance Risk & Compliance
📋Plain English
What is GRC?
You review policies, check systems, and write reports. The least technical path into cybersecurity.
This role is for you if you're organized, love checklists, and communicate clearly.
📋About the Role
Develop, review, and maintain information security policies and procedures. Map policies to regulatory requirements and ensure alignment with industry frameworks.
Policy WritingNIST 800-53Control FrameworksDocumentation
Your roadmap to get this job
Most people finish in 10–18 weeks from zero.
▸CompTIA Security+
▸Read NIST Framework
▸Learn risk assessment
▸Study SOC 2 / ISO 27001
▸Write practice assessments
▸Create sample deliverables
▸Highlight transferable skills
▸Apply to GRC roles
▸Use writing strengths
Want the full GRC career guide?
Salary data, day-in-life, personality match, full roadmap.