GRC Analyst resume keywords
Frameworks and audits by name, with the controls you assessed or implemented. These are the terms recruiters search the ATS for, written the way postings write them.
Skills and methods
- NIST Cybersecurity Framework
- ISO/IEC 27001
- SOC 2
- Risk Assessment
- HIPAA
- PCI DSS
Domain knowledge
- Policy Development
How to use them
- Use the posting's exact wording. If it says a term one way, write it that way at least once.
- List certifications by full name and acronym in a Certifications section: "Certified Information Systems Security Professional (CISSP)"
- State a clearance precisely: level and that it is active
- Name the product, not the category: "Splunk" and "CrowdStrike Falcon", not only "SIEM" and "EDR"
- Only list what is true for you. A keyword you can't back up in an interview costs more than it gains.