GRC Analyst

Job Description:

• Conduct and manage third-party risk assessments, including initial due diligence and ongoing vendor monitoring
• Collaborate with internal teams to create and maintain security policies, standards, and procedures
• Assist with risk analysis to identify, evaluate, and track organizational risks
• Support the annual SOC2 audit by gathering evidence, coordinating with stakeholders, and tracking findings
• Contribute to the development and maintenance of the GRC program aligned with business objectives
• Promote security and risk awareness through communication and collaboration
• Use artificial intelligence and machine learning tools to automate routine tasks, identify patterns, and improve GRC efficiency
• Conduct internal audits of systems and processes
• Address ambiguous or unfamiliar problems and develop skills to solve them

Requirements:

• Bachelor's degree in a related field or equivalent practical experience
• 1-2+ years of experience in a GRC, risk, or compliance role
• Experience with third-party/vendor risk management processes, including conducting due diligence and assessments
• Familiarity with creating or maintaining policies, standards, and procedures
• Understanding of risk assessment methodologies and ability to help identify and evaluate risks
• Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams
• Strong organizational and communication skills
• Excellent verbal and written English language skills
• Demonstrated versatility across tasks, tools, and priorities
• Track record of asking good questions when something is unclear
• Intellectual curiosity about risk, compliance, and security
• Familiarity with AI and use cases within business settings
• Solid understanding of AWS or other cloud structures

Benefits:

• Annual target bonus of 10%
• Remote work arrangement