Senior GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as a proactive GRC advisor for a diverse portfolio of clients, assisting them in conducting risk assessments, maintaining risk registers, preparing for audits, and implementing controls.

• Support clients in their audit preparations and processes (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, and similar frameworks), converting requirements into actionable next steps.

• Provide guidance on the development of policies and the design of controls customized to fit each client's risk profile and maturity level.

• Identify GRC complexities early — discerning when a client's inquiry involves risk, compliance, or audit subtleties that require more than a generic playbook response.

• Collaborate closely with Support and Customer Success teams to manage escalations that necessitate genuine GRC expertise, beyond mere product knowledge.

• Transform frequently asked customer queries into scalable solutions — creating playbooks, internal knowledge base content, and best-practice frameworks for team-wide use.

• Represent the client's voice internally, highlighting areas where our platform could enhance support for practical GRC workflows.

⛳️ Requirements

• Minimum of 5 years' experience as a GRC analyst, consultant, or coordinator — whether in-house, at a consulting firm, or in a related role.

• Direct, practical experience with audits, risk assessments, risk registers, and policy implementation — you have been actively involved, rather than just familiar with the concepts.

• Knowledge of common frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, or similar) is essential.

• An innate ability to recognize GRC complexities: you can identify when an issue is more intricate than it seems and know how to clarify it for someone who is struggling.

• Excellent consultative communication skills — able to convey compliance concepts to non-technical stakeholders without sacrificing clarity.

• A genuine passion for helping clients solve their challenges, rather than simply closing tickets.

• Nice to Have: Certifications such as CISA, CRISC, CGRC, or ISO 27001 Lead Implementer/Auditor. Experience with a GRC software platform (as a practitioner, implementer, or vendor-side consultant). Exposure to various industries or company sizes, providing you with a broader understanding of how GRC programs function in practice.

🏝️ Benefits

• Competitive salary along with significant equity participation during a pivotal Series A phase.

• Comprehensive paid benefits package, including health insurance, 401(k), and generous leave policies.