GRC Analyst

📋 Description

• Run SOC 2 end to end, including the auditor relationship, evidence collection and interpretation in
• Build and maintain an authoritative inventory of where PHI lives and which systems and models touch
• Use AI coding assistants analytically to verify whether a control (e.g., encryption at rest) is
• Build and run the security review process for new vendors and AI model providers, partnering with
• Partner with engineering to enumerate, prioritize, and remediate security risks on a predictable
• Serve as first point of contact for RFPs and security questionnaires, and maintain a trust portal

🎯 Requirements

• Senior-level GRC or compliance experience in a SaaS environment, including owning a SOC 2 (or
• Comfortable using an AI coding tool like Claude Code to answer compliance questions directly from
• Ability to threat-model a new vendor: what data it touches, where that data flows, and what
• Clear writing and communication: write policies and standards that hold up to audit and that
• Startup ownership mindset: thrive in ambiguity, take a partially built function and make it

🎁 Benefits

• Comprehensive medical, dental, and vision coverage for you and your dependents
• 401(k) with a company match of up to 3% of base salary
• Remote-friendly culture with full equipment provisioning
• Parental leave
• Annual company-wide off-sites, team off-sites, regular team lunches, and all-hands gatherings
• Flexible time off with no annual cap, company-wide holidays, and annual holiday shutdown from