GRC Analyst II

📋 Description

• Maintain data classification program and tagging standards with data owners
• Maintain system classification inventory with defined cadence reviews
• Support audit coordination for SOC 2 and other frameworks
• Conduct vendor security assessments
• Manage policy lifecycle: draft policies, track reviews, approvals
• Identify control gaps and partner with business units to fix

🎯 Requirements

• Bachelor's degree in cybersecurity or related field
• 2-4 years in GRC or information security at a SaaS company
• Knowledge of SOC 2, ISO 27001, NIST 800-53, or CIS
• Experience with data classification and data governance
• Experience with vendor security assessments and third-party risk
• Experience with GRC tools (Drata, ServiceNow GRC)

🎁 Benefits

• Remote-first model: work from home or co-working spaces
• Flexible paid time off
• 14 paid holidays plus 2 floating holidays
• Medical, dental, vision, life, disability coverage
• 401(k) retirement plan with company match
• 16 weeks paid parental leave