GRC Analyst, Governance, Risk, Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage GRC workstreams from the initial request stage through evidence gathering, testing, remediation, and finalization.

• Ensure YipitData remains audit-ready throughout the entire year.

• Evaluate security controls and determine their effectiveness.

• Perform risk assessments to identify gaps and assist in developing feasible remediation strategies.

• Align controls with SOC 2 and other compliance frameworks.

• Oversee access reviews, control evaluations, policy assessments, risk updates, and audit evidence submissions.

• Assess the security practices of vendors.

• Assist in responding to customer security questionnaires by ensuring accurate and consistent answers.

• Convert compliance requirements into actionable steps.

• Create and update policies, standards, control narratives, risk documentation, metrics, and program records.

• Monitor findings and commitments for remediation, following up with responsible parties.

• Streamline and automate repetitive GRC tasks.

• Oversee governance for AI products, agents, and new data management practices.

• Collaborate with Security, IT, Engineering, Legal, Finance, and People teams.

⛳️ Requirements

• Background in security, compliance, risk management, auditing, privacy, vendor risk, or a related field that requires evaluating expectations.

• Knowledge of SOC 2, NIST CSF, or comparable security and compliance frameworks.

• Excellent writing abilities, particularly in articulating complex requirements clearly.

• Capacity to identify inconsistencies, missing data, and unsupported responses.

• Skill in asking follow-up questions and respectfully addressing concerns.

• Proficiency in managing multiple workstreams, adhering to deadlines, and ensuring thorough follow-through.

• Ability to effectively communicate with both technical and non-technical teams.

• Capability to work autonomously and recognize when escalation is necessary.

• Enthusiasm for governance related to AI and other innovative technologies.

🏝️ Benefits

• Flexible work hours.

• Flexible vacation policy.

• Generous 401K matching.

• Parental leave.

• Team-building events.

• Wellness budget.

• Educational reimbursement.

• Equity opportunities.

• Remote work flexibility.