Senior Security GRC Analyst

Overview

Job Description

Responsibilities

• - Own and mature our compliance framework: continuous controls monitoring, develop security awareness training, evidence currency, audit coordination — collecting and presenting evidence, pulling the right people into auditor calls, and managing findings to closure.
• - Automate GRC — evidence collection, questionnaire responses, risk management workflows, and enforcing compliance — using compliance platforms and AI tooling.
• - Own the third-party risk management (TPRM) program: vendor security assessments, risk tiering, approval workflows, and continuous monitoring.
• - Develop, maintain, and mature our risk management program — risk register, risk assessments, treatment tracking, and reporting to leadership.
• - Write, maintain, and update security policies and procedures, keeping documentation current as our control environment evolves.
• - Own and scale customer assurance end to end — security questionnaires, evidence requests, trust center content, and knowledge base.

Required Skills

• - 3-5 years operating and scaling security GRC, compliance, or customer assurance programs in high-growth environments — security GRC specifically.
• - Hands on security knowledge — you have worked on designing and developing the technical controls behind the frameworks (IAM, endpoint, cloud infrastructure) well enough to speak credibly with both auditors and engineers.
• - Meticulous attention to detail — you can sit down and work a sensitive or content heavy document line by line quickly, you deeply care about the nuances.
• - Strong cross-functional coordination — this role lives across People, Legal, IT, Operations, Engineering, and leadership.
• - Hands-on experience writing, maintaining, and updating security policies, standards, and procedures.
• - Hands-on experience with SOC 2 or equivalent and customer assurance (security questionnaires, evidence requests, RFPs).
• - Experience with compliance platforms and continuous controls monitoring (Vanta, Drata, Oneleet, SafeBase, or similar).
• - Experience leveraging AI tools (Claude, ChatGPT) for GRC workflows.
• - Strong written communication for customer-facing security responses and audit documentation.

Benefits

• - Work wherever you want! As a fully remote company with no central office, we want you to work wherever you are happiest and most productive.
• - Competitive cash and equity compensation in a hyper growth, early stage company.
• - Stipend to set-up your ideal working environment.
• - Competitive Benefit Plans for employees based on your location (e.g. in the US we offer: Medical, dental and vision benefits and the ability to contribute to a 401k plan).
• - Unlimited PTO.
• - 3 day weekend every month! We take off the “First Friday” every month to focus on rest, recuperation, or just having fun!