GRC Analyst

Job Summary

Joining the Compliance & Security team, the full-time remote GRC Analyst will manage risk assessments, maintain compliance programs, and support internal audits while collaborating with engineering, security, IT, and legal teams.

Key responsibilities

• Run risk assessments across the company and major product changes, proposing treatments and informing leadership on risk tolerance decisions
• Maintain the risk register, track remediation efforts, and report status to compliance and security leadership
• Monitor controls on a rolling basis, triaging failures and aligning findings with owners and due dates

Required qualifications

• 3+ years of experience in GRC, internal audit, or security compliance at a SaaS or technology company
• Familiarity with SOC 2 and ISO 27001 controls and compliance platforms such as Drata or Vanta
• Experience with evidence collection from systems like AWS, GCP, Google Workspace, and Okta
• Ability to communicate effectively with both technical and non-technical audiences
• Experience working in async or globally distributed teams