Governance Risk Compliance Analyst

Job Summary

To support the compliance initiatives of a growing Security, IT, and Privacy function, the full-time Governance Risk Compliance Analyst will manage compliance programs across various frameworks, coordinate audit activities, and leverage AI tools to deliver metrics in a hybrid work environment.

Key Responsibilities

• Own and manage compliance programs across frameworks including SOC 2, ISO 27001, GDPR, CCPA, HIPAA, and FedRAMP
• Coordinate audit activities end-to-end: evidence collection, documentation, auditor responses, and remediation tracking
• Conduct vendor and third-party risk assessments; manage the due diligence lifecycle for new and existing partners

Required Qualifications

• 3-5 years of experience in GRC, Information Security compliance, or a related field
• Hands-on experience with SOC 2 or ISO 27001 audits, including evidence collection and gap assessments
• Familiarity with privacy regulations: GDPR, CCPA, and ideally emerging AI regulatory frameworks
• Experience managing vendor risk assessments and third-party due diligence processes
• Strong written and verbal communication skills to explain compliance requirements to diverse teams