---
title: 'Analyst – vGRC (virtual Governance, Risk, and Compliance) at Tevora'
canonical: 'https://feeny.ai/job/analyst-vgrc-virtual-governance-risk-and-compliance-tevora-irvine-65ckeqs8sw18'
type: 'job'
last_seen: '2026-11-08'
---

# Analyst – vGRC (virtual Governance, Risk, and Compliance) at Tevora

- **Company:** Tevora
- **Location:** Irvine, CA
- **Compensation:** $95k–$105k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-22
- **Last confirmed live:** 2026-11-08
- **Apply:** https://jobs.lever.co/tevora/20eabf21-2dab-46ec-ba85-d9dc4bf3869a

## Job description

Analyst – vGRC (virtual Governance, Risk, and Compliance) at Tevora Irvine, CA, or Fairfax, VA

If you haven't heard of Tevora, it's because we've done our job!

Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you

What's the role?

Tevora is seeking a passionate Information Security Consultant who has a solid balance between business acumen and technical expertise. Comfortable across various disciplines of information security, this analyst consultant will be responsible for supporting clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on InfoSec best practices.

A day in the life could include:

- Directly support clients in a variety of roles, such as Governance, Risk, and Compliance (GRC) programs, audit support, policy and procedure development, and advising on Information Security best practices.
- Drive successful completion of Sarbanes-Oxley (SOX) audits as part of Client’s GRC team, focused on the ITGCs.
- Coordinating and managing Clients regarding internal or external audits, including:
- Control compliance review
- Evidence collection
- Coordination of audit work
- Leading or supporting compliance and risk assessments, including providing guidance to junior resources
- Conducting interviews with clients to analyze their information security controls or risk and identify recommendations
- Execute on multiple client engagements simultaneously
- Communicating with project stakeholders to effectively convey requirements of technical and process improvements.
- Assisting in the development of customized policies, procedures, controls, disaster recovery plans and other documentation for applications, systems, and infrastructure.
- Working with cross functional teams to provide InfoSec compliance support, and maintaining communicating across groups
- Additional duties as assigned

Necessary skills and qualifications:

- Direct experience with ITGCs of SOX, including either externa or internal audit role
- Connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to offer recommendations as an expert with best practices.
- Work independently without detailed guidance, including anticipating next steps and problem solving
- Understanding and predicting customer and project needs
- Ability to balance various project timelines and prioritize differing client needs
- Be proficient in writing executive level reports and technical documentation.
- Have comprehensive knowledge of common IT and security concepts, with a strong desire to expand knowledge base
- At least one Accounting, Risk or IT certification held or in process (i.e., CPA, CISSP, CISA, CISM, CRISC).
- Bachelor's Degree from an accredited 4-year university
- Minimum 3 years of experience in the information security, information technology, business consulting, enterprise risk or compliance field.
- Direct experience with at least one of the following compliance frameworks in addition to SOX: ISO 27001, SOC 2, SOC 1, SOX, or PCI-DSS

Bonus Points:

- Demonstrated experience as an Information Security Compliance Auditor
- At least 2 years experience in client-facing role (e.g., consulting or external auditor)

Additional requirements:

- Eligibility to work in the United States.
- Must be available to work a hybrid schedule at our Irvine, CA office.

We’ve got you covered!

- Comprehensive benefits offering
- Group Medical, Dental, and Vision, Life insurance, and FSA options
- Paid time off and holidays
- 401k with Company match
- Vibrant work culture

EEOC Statement Tevora is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or other applicable legally protected characteristics.

## About Tevora

## Company Overview
- **One-liner**: Tevora is a specialized management consultancy focused on cybersecurity, risk, and compliance services, primarily supporting Chief Information Security Officers (CISOs).
- **Entity Type**: Private (funding stage not disclosed)
- **Headquarters**: Irvine, California, United States (additional office in Fairfax, Virginia)
- **Founded**: 2003
- **Founders**: Not publicly available

## Core Business
- Primary industry: Cybersecurity, risk management, and compliance consulting
- Target customers: B2B – mid-market to enterprise organizations, with a focus on CISOs and security leaders
- Mission statement: “We are a cybersecurity and compliance consultancy focused on supporting the Chief Information Security Officer. Our sole objective is to help keep your organization compliant, and your brand safe.” [tevora.com/about](https://www.tevora.com/about/)

## Products & Services
Tevora offers a suite of consulting services rather than standalone products. Major service lines include:

- **AI Security & Compliance**: Helping clients navigate new AI-related compliance frameworks and associated security challenges. [tevora.com](https://www.tevora.com/)
- **Compliance Assessments & Automation**: Streamlining compliance processes across multiple frameworks (e.g., SOC 2, ISO 27001, PCI DSS) to reduce internal burden.
- **Threat Management & Response**: Proactive penetration testing, social engineering, and incident response services to identify and remediate vulnerabilities. [tevora.com](https://www.tevora.com/)
- **Technology Consulting & Implementation**: Vendor-agnostic guidance to select and deploy the best-fit security tools across hundreds of solutions.
- **Risk & Strategic Services**: Enterprise risk management, third-party risk management, business continuity/disaster recovery exercises, and executive-level CISO support. [tevora.com](https://www.tevora.com/)
- **CISO Support**: Flexible Governance, Risk & Compliance (GRC) support, DevSecOps assistance, and fractional CISO services to supplement internal teams. [tevora.com/about](https://www.tevora.com/about/)

## Market Standing
- **Valuation**: Not disclosed
- **Key Metric**: Over 2,000 clients served and 10,000+ audits performed, with 20+ years of experience supporting CISOs. [tevora.com](https://www.tevora.com/)
- **Notable Investors/Partners**: Not publicly available
- **Growth Signals**: Maintains a hybrid workforce with offices in Irvine, CA and Fairfax, VA; employs 189 people (as of latest Built In profile). The company emphasizes continuous growth and has a structured Consultant Development Program (CDP) internship for aspiring cybersecurity professionals. [builtin.com](https://builtin.com/company/tevora)

## Competitive Advantages
- **Vendor-agnostic stance**: Tevora takes a neutral approach to technology selection, helping clients find the best solution without bias. [tevora.com](https://www.tevora.com/)
- **CISO-centric focus**: Entire practice is built around supporting the Chief Information Security Officer, offering both strategic and hands-on expertise.
- **Full-service security & compliance**: Covers the entire lifecycle from assessment to implementation to ongoing management, including emerging areas like AI security.
- **Veteran owned**: The company values military experience and is veteran-owned, contributing to a disciplined, mission-driven culture. [tevora.com/careers](https://www.tevora.com/careers/)

## Strategic Focus
- **AI-driven security & compliance**: Actively pioneering security programs that account for new AI-related compliance frameworks and threat vectors. [tevora.com](https://www.tevora.com/)
- **Continuous compliance**: Moving beyond one-time assessments to help clients achieve and maintain continuous compliance through automation and ongoing support.
- **Talent development**: Investing in the Consultant Development Program and professional development to build a pipeline of expert cybersecurity consultants. [tevora.com/careers](https://www.tevora.com/careers/)

## Why Work Here
- **Culture**: Described as a team of “A players” with mutual support, trust, and a passion for client success. Emphasizes collaboration, innovation, and a commitment to diversity and inclusion. [tevora.com/careers](https://www.tevora.com/careers/)
- **Work model**: Hybrid – employees engage in a combination of remote and on-site work. Offices in Irvine, CA and Fairfax, VA. [builtin.com](https://builtin.com/company/tevora)
- **Benefits**: 401k matching, health/vision/dental insurance, vacation and paid time off, company equity. [tevora.com/careers](https://www.tevora.com/careers/)
- **Professional development**: Structured Consultant Development Program (10‑week internship for students/recent graduates), training resources, and career growth support. [tevora.com/careers](https://www.tevora.com/careers/)
- **Veteran & diversity focus**: Veteran-owned with an active commitment to creating an inclusive environment where every human being can thrive. [tevora.com/careers](https://www.tevora.com/careers/)

## Sources
1. [tevora.com/careers](https://www.tevora.com/careers/)
2. [tevora.com](https://www.tevora.com/)
3. [tevora.com/about](https://www.tevora.com/about/)
4. [jobs.lever.co/tevora](https://jobs.lever.co/tevora)
5. [builtin.com/company/tevora](https://builtin.com/company/tevora)

## Other roles at Tevora

- [Account Director](https://feeny.ai/job/account-director-tevora-las-vegas-hkmfga8k893s) — Las Vegas, NV
- [Cybersecurity Internship Summer 2027 - Threat](https://feeny.ai/job/cybersecurity-internship-summer-2027-threat-tevora-irvine-mx7xs545tkfg) — Irvine, CA
- [Cybersecurity Internship Summer 2027 - Solutions](https://feeny.ai/job/cybersecurity-internship-summer-2027-solutions-tevora-irvine-e437kjx8xah3) — Irvine, CA
- [Cybersecurity Internship Summer 2027 - Systems and Organizations Controls (SOC)](https://feeny.ai/job/cybersecurity-internship-summer-2027-systems-and-organizations-controls-soc-7xpzfm8qqcmf) — Irvine, CA
- [Cybersecurity Internship Summer 2027 - Payments](https://feeny.ai/job/cybersecurity-internship-summer-2027-payments-tevora-fairfax-3d3087ex7y4s) — Fairfax, VA
- [Cybersecurity Internship Summer 2027 - International Organization for Standardization (ISO)](https://feeny.ai/job/cybersecurity-internship-summer-2027-international-organization-for-8pkb0swq0vw3) — Irvine, CA
- [Cybersecurity Internship Summer 2027 - Healthcare](https://feeny.ai/job/cybersecurity-internship-summer-2027-healthcare-tevora-irvine-jpsxdyq4b0ea) — Irvine, CA
- [Cybersecurity Internship Summer2027 - Federal](https://feeny.ai/job/cybersecurity-internship-summer2027-federal-tevora-fairfax-gss4encqq1ed) — Fairfax, VA
- [Cybersecurity Internship Summer 2027 - Enterprise Risk Management](https://feeny.ai/job/cybersecurity-internship-summer-2027-enterprise-risk-management-tevora-irvine-t36rn85cz1tp) — Irvine, CA
- [Account Director](https://feeny.ai/job/account-director-tevora-irvine-j92hk6exb8ph) — Irvine, CA