GRC Analyst

📋 Description

• Lead and support audits across SOX, SOC, PCI, and NIST — from scoping through reporting — while
• Evaluate control design and operating effectiveness, manage security risk assessments and exception
• Conduct vendor security and privacy reviews, assess third-party control maturity, and track
• Respond to customer security questionnaires and partner assessments by coordinating timely
• Support data privacy audits and assessments covering GDPR, CCPA/CPRA, data retention, deletion
• Improve GRC operations through automation, integrations, AI-enabled workflows, and continuous

🎯 Requirements

• 3+ years of experience in GRC, IT audit, security compliance, or privacy compliance, with
• Proven experience leading or supporting complex compliance programs across frameworks such as SOX
• Experience evaluating IT controls and translating requirements into clear, actionable expectations
• Experience supporting vendor risk programs, including security due diligence and review of
• Working knowledge of SaaS and cloud environments.
• Experience using GRC or workflow platforms to maintain accurate records and drive repeatable

🎁 Benefits

• A choice between medical plans with an option for 100% covered premiums
• Fertility and adoption benefits
• Access to supplemental insurance plans for additional coverage
• Headspace mindfulness app subscription
• Global Employee Assistance Program
• Retirement benefits with employer match