GRC Analyst

Simile•San Francisco, CA

About The Position

GRC at Simile means acting as the bridge between our technical operations and our business objectives, ensuring our frontier AI systems operate with integrity. Your mission is straightforward: making stuff secure and compliant. You will connect governance, risk management, and compliance to protect our organization and our customers without slowing down our fast-paced iteration cycles. The people who do well here are energized by building scalable processes, digging into hard security problems, and staying on top of the details. You'll move fast, have real ownership early, and work closely with product and research to build a foundation of trust for Fortune 500 organizations across industries.

Requirements

2-4 years of experience working as a Security Compliance Analyst, Customer Trust Analyst, or in a similar GRC role.
Bachelor's degree in Mathematics, Cybersecurity, Information Systems, or a related discipline.
Professional working proficiency in SQL to interpret security metrics, extract data, and assist with technical compliance queries.
Strong understanding of risk assessment methodologies.
Exceptional communicator, including proficiency in PowerPoint for presenting risk reports and translating technical concepts for non-technical leadership.
Proven ability to work collaboratively, utilizing strong team building skills to facilitate cooperation between security, IT operations, developers, and business units.

Nice To Haves

Demonstrated leadership potential and a proactive approach to problem-solving.
Relevant industry certifications such as Security+, CISA, CISM, or CCSK.
Exposure to cloud security concepts, AI safety frameworks, or data-heavy products.
Familiarity with enterprise software deployments or B2B SaaS.

Responsibilities

Develop, implement, and maintain practical security policies and standards (e.g., data handling, access control) that align with our business objectives and AI-driven mission.
Act as a Customer Trust Analyst to address security-related inquiries.
Track compliance status across key frameworks (e.g., SOC 2, ISO 27001) and maintain the evidence required to demonstrate compliance to auditors and enterprise customers.
Identify, evaluate, and prioritize IT and security risks, documenting these findings in risk registers and working to mitigate threats across the organization.
Bridge the gap between compliance requirements and what product and modeling teams build, translating complex requirements into actionable technical security controls.
Develop and deliver targeted security awareness programs to educate employees and foster a security-conscious culture across the company.