GRC Analyst II

📋 Description

• Maintain data classification program across systems and assets.
• Maintain system classification and ownership inventory with cadence.
• Support SOC 2 and other framework audit coordination.
• Conduct vendor security assessments and reviews.
• Manage policy lifecycle: drafting, reviews, approvals, version control.
• Identify control gaps and partner with teams to implement effective controls.

🎯 Requirements

• Bachelor's degree in cybersecurity, information systems, or related field
• 2-4 years in GRC or information security in a commercial SaaS or software company
• Knowledge of SOC 2, ISO 27001, NIST 800-53, or CIS
• Experience with data classification frameworks and data governance
• Experience conducting vendor security assessments and third-party risk workflows
• Hands-on audit support experience for SOC 2 or similar frameworks

🎁 Benefits

• Remote-first model with flexible work location
• Monthly all hands meetings and leadership AMAs
• Learning and development opportunities
• Continuous feedback culture and career growth
• RRSP matching up to 4%
• Annual remote work stipend for wellness or home office