GRC (Governance, Risk, and Compliance) Analyst

📋 Description

• Remote-friendly role focusing on governance, risk, and compliance activities for security programs.
• Lead GRC workstreams from request through evidence collection, testing, remediation, and completion.
• Assess risks, map controls to frameworks, and collaborate with Security, IT, Engineering, Legal
• Support customer security questionnaires and translate requirements into actionable tasks for

🎯 Requirements

• Experience in security, compliance, risk, audit, privacy, or vendor risk.
• Familiarity with SOC 2, NIST CSF, or similar frameworks.
• Strong writing skills to explain complex security requirements clearly.
• Ability to connect policy requirements to real-world actions and evidence.
• Comfort working in a dynamic environment with multiple workstreams.

🎁 Benefits

• Flexible work hours and locations with emphasis on ownership and growth.
• Competitive base salary, equity, and comprehensive benefits.
• Remote-friendly with US HQ in NYC and tax considerations for non-office remote work.