GRC Analyst

Steno

4d • $100,000 - $120,000 • Remote

About The Position

We’re looking for a GRC Analyst with experience in security compliance within a remote-first, technology-focused organization. You've helped build core compliance processes and policies in a growing company and understand what it takes to scale compliance programs effectively. Beyond technical expertise, you're a self-directed professional with strong project management abilities who can handle multiple projects simultaneously, communicate clearly through documentation, and demonstrate the patience and persistence needed to see compliance tasks through. You take confidentiality seriously and can be trusted with sensitive compliance matters. If you’re looking for a company that offers support, guidance, an abundance of killer giphys, and unlimited potential to grow into your best self, you can bet we’d love to have you too.

Requirements

• You have 3 to 5 years of experience in a security compliance role
• You have experience participating in SOC2 audit compliance and controls management
• You have experience participating in a formal risk management program
• You have experience performing Business Impact Analysis activities
• You have experience performing third-party vendor risk audits

Responsibilities

• Demonstrate a strong understanding of control frameworks and compliance requirements in your day-to-day work
• Apply your strong understanding of the SOC2 audit process and reporting requirements to support organizational compliance efforts
• Utilize proficiency with documentation tools and evidence management systems to maintain organized compliance records
• Work with vendor assessment questionnaires (VSAQ, SIG, CAIQ) to evaluate third-party security postures
• Leverage data analysis skills for tracking compliance metrics and trends to inform decision-making
• Apply a detail-oriented approach to policy documentation and procedure writing to ensure accuracy and clarity
• Coordinate audit activities across distributed teams to keep projects on track and ensure alignment
• Conduct research to stay current with regulatory changes and evolving compliance landscapes
• Embrace a process improvement mindset for enhancing compliance workflows and operational efficiency
• Utilize strong data gathering skills and problem-solving abilities to adapt to novel challenges as they arise
• Employ strong organizational skills and create templates/forms to gather Business Impact Analysis and Third Party Risk information from other departments

Benefits

• Health, Vision, & Dental Benefits - low-cost health plans that free up mind space and unlock our employees' best work
• Wellness/Mental Health - shared benefits to be used among employees and families
• Flexible Paid Time Off - allowing employees to find balance in their lives
• Options of Equity - we know our success is nothing without our team
• Access to a company-provided 401(k) account
• A home office setup and a monthly stipend to offset internet and phone costs

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 251-500 employees