IT Risk and Compliance Analyst

📋 Description

• Review client MSAs, SOWs, DPAs, security addenda, and related agreements using contract analysis
• Translate contractual security, privacy, data handling, audit, breach notification, and
• Respond to client security questionnaires, due diligence requests, and audit inquiries while
• Collect, organize, maintain, and manage control evidence within the GRC platform, tracking
• Support vendor risk management activities for SaaS and AI providers by reviewing security
• Operationalize data retention and disposal requirements by tracking departmental retention

🎯 Requirements

• Bachelor’s degree or equivalent practical experience, with 3–5 years of professional experience in
• Hands-on experience reviewing commercial agreements, ideally including MSAs, DPAs, security
• Experience responding to client security questionnaires, vendor due diligence requests, audit
• Working knowledge of at least one major security or compliance framework, such as SOC 2, ISO 27001
• Foundational understanding of data privacy regulations such as GDPR and CCPA, particularly how
• Exceptional organizational and follow-through skills, with the ability to manage numerous parallel

🎁 Benefits

• Salary range of $80,000–$90,000 USD.
• Remote working arrangement within the United States.
• Opportunity to help build and shape an IT risk and compliance program from the ground up.
• Broad exposure to IT risk, compliance, privacy, vendor management, contracts, security operations
• Collaborative and inclusive work environment that values diverse perspectives and authentic
• Opportunities to work closely with cross-functional teams across legal, technology, delivery