GRC Analyst
Core
GRC Analyst supporting risk management, audit, and compliance programs (SOC 2, ISO/IEC 27001:2022) for a developer tool platform.
Role type
GRC Analyst (Compliance & Security)
Builds
Continuous control validation programs and risk management frameworks.
Domain
SaaS / Cloud Infrastructure / Security Compliance
Required skills
GRC frameworks (SOC 2, ISO 27001), risk assessment, internal audit support, compliance platform management, automated control testing, evidence collection, risk register management, remediation tracking, cross-functional collaboration.
Preferred skills
Experience with AWS, GCP, Google Workspace, Okta, AI coding tools for custom tests.
Technologies
Drata, Vanta, AWS, GCP, Google Workspace, Okta, AI coding tools
Responsibilities
Run risk assessments and maintain risk registers; monitor controls and triage failures; support internal and external audits; manage evidence collection and readiness; extend continuous control validation with custom automated tests.
Seniority
Mid-level (3+ years experience)
