Remote job
GRC Analyst
Job details
About this role
Role overview Help embed risk management, audit, and compliance into the day-to-day operations of a technology organization. You’ll work across security, engineering, IT, and legal to assess risks, maintain compliance programs, validate controls, and support audits. The role emphasizes ongoing evidence gathering and practical automation to make compliance more continuous and less dependent on manual collection.
Responsibilities - Assess company-wide risks and significant product changes, evaluate likelihood and impact, recommend treatment, and present findings to leadership. - Maintain the risk register, follow remediation through completion, and report progress to compliance and security leaders. - Test controls on a rolling basis, investigate failures, and coordinate owners and due dates according to risk. - Support internal audits by shaping scope, collecting evidence, and tracking findings to closure. - Coordinate routine compliance operations, including evidence gathering, control-owner follow-up, and audit readiness. - Develop additional control checks with coding tools and source-system evidence, working with engineering and IT to confirm that tests demonstrate the required controls.
Requirements - At least three years of experience in GRC, internal audit, or security compliance at a technology or SaaS organization. - Working familiarity with SOC 2 and ISO 27001 controls. - Experience with a compliance platform and evidence from systems such as AWS, Google Cloud, Google Workspace, or Okta. - Clear communication with technical and non-technical colleagues. - Comfort working asynchronously with distributed teams, navigating ambiguity, and moving quickly.
Benefits and work setup - Fully remote, with a global hiring approach and a coworking membership or allowance. - Equity ownership, a technology setup allowance, and an annual professional development allowance. - Health insurance coverage for employees and partial coverage for dependents. - Flexible asynchronous work and an annual company gathering.