Security Governance Risk & Compliance Analyst I
About The Position
We're looking for a detail-oriented and curious GRC Analyst to join our Governance, Risk & Compliance team. In this role, you'll support the day-to-day operations of our risk and compliance program, helping assess third-party vendors, maintain policy documentation, track control evidence, and support audit activities. We're especially interested in candidates who've explored tools like Claude Code and are curious about how AI can be applied to cybersecurity and compliance work. This is a great opportunity for someone early in their career who wants to build a strong foundation in enterprise risk management and information security compliance, joining a senior, globally distributed team that will invest in your growth from day one.
Requirements
- 0–2 years of experience in GRC, risk operations, compliance, or a related function (internships count)
- Bachelor's degree Computer Science, Cybersecurity, Information Systems, Business, or a related field. Equivalent work experience also considered.
- Genuine interest in GRC engineering and a willingness to learn quickly in a fast-paced environment required
- Hands-on familiarity with Claude Code or similar AI coding tools, and an ability to think through how they could be applied to cybersecurity or GRC work (hobby projects welcome)
- Strong written and verbal communication skills - you'll be working cross-functionally and with external vendors
- High attention to detail and comfort working with documentation, spreadsheets, and tracking tools
- Proficiency in Microsoft Office or Google Workspace
Nice To Haves
- Coursework or certification in cybersecurity or risk management (Security+, CISA, etc.)
- Exposure to compliance frameworks such as SOC 2, ISO 27001, NIST, or PCI-DSS
- Experience in an operations or process-driven role (internship or otherwise)
Responsibilities
- Support third-party risk assessments by reviewing vendor security questionnaires, documentation, and due diligence materials
- Maintain and update the vendor risk register and track remediation activities to closure
- Assist with internal control testing and evidence collection for compliance frameworks (SOC 2, ISO 27001, PCI-DSS, etc.)
- Help coordinate audit requests and liaise with internal stakeholders to gather required documentation
- Monitor policy and procedure documentation, flagging items due for review or update
- Assist in tracking risk exceptions, escalating items that require senior review
- Support reporting and metrics preparation for leadership and committee-level reviews
- Contribute to process improvement initiatives as the program scales
Benefits
- bonus or commission
- equity
- benefits in accordance with local policies
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
