GRC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
GRC Analyst testing controls, managing audits, and assessing risk for YipitData’s alternative-data analytics business. Supporting SOC 2, vendor reviews, customer questionnaires, and AI governance.
Responsibilities:
- Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion
- Help keep YipitData audit-ready throughout the year
- Test security controls and validate that evidence proves controls are operating
- Conduct risk assessments and help develop remediation plans
- Map controls across SOC 2 and other frameworks
- Coordinate access reviews, control testing, policy reviews, risk updates, and audit evidence requests
- Review vendors' security practices
- Support customer security questionnaires
- Translate compliance requirements into clear actions
- Draft and maintain policies, standards, control narratives, risk records, metrics, and program documentation
- Track findings and remediation commitments
- Simplify and automate repetitive GRC work
- Help develop governance for AI products, agents, and new data-handling methods
- Partner with Security, IT, Engineering, Legal, Finance, and People teams
Requirements:
- Experience in security, compliance, risk, audit, privacy, vendor risk, or another related field
- Hands-on SOC 2 experience, including supporting Type I or Type II audits, testing controls, validating evidence, coordinating with auditors, and tracking remediation through completion
- Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks
- Strong writing skills to make complicated requirements clear
- Ability to identify inconsistencies, missing information, and unsupported answers
- Comfort asking follow-up questions and respectfully pushing back
- Ability to organize multiple workstreams, meet deadlines, and follow through
- Ability to communicate with technical and non-technical teams
- Ability to work independently and know when to escalate
- Interest in governance for AI and emerging technologies
- Flexible availability, with most employees working East Coast hours
Benefits:
- Flexible work hours
- Flexible vacation
- Generous 401K match
- Parental leave
- Team events
- Wellness budget
- Learning reimbursement
- Equity
- Remote work opportunity
Similar Jobs
Project Scientist – Human Health Risk Assessor
Project Scientist leading human health risk assessments for EHS Support’s environmental consulting clients. Managing projects, regulators, staff mentorship, and remedial strategy development.
Principal Identity Governance Lead
Principal Identity Governance Lead redesigning human and non-human identity governance for Hyland’s AI-powered content platform. Building secure, compliant IAM frameworks across cloud and on-premises environments.
Senior Manager, Risk & Trading
Senior risk and trading manager optimizing sportsbook operations, pricing, and risk for Fliff’s rewards-driven social sports gaming platform. Leading analysts and traders while shaping market strategies.
Senior Manager, CBR & FCRA Risk Governance
Senior risk governance manager overseeing FCRA credit reporting and disputes at Octane, a financial technology company. Leading Metro 2 submissions, compliance controls, and Dispute Analyst teams.
Mid-Level Project and Governance Analyst
Analista de Projetos e Governança de TI acompanhando cronogramas, entregas e indicadores. Fazendo a interface entre negócios, times técnicos, desenvolvedores e fornecedores em trabalho remoto.
IT Governance Manager
IT-Governance Manager translating DORA and ISMS requirements into controls at digital insurer Neodigital. Supporting security measures, policies, audits, and regulatory implementation.
Data Governance and Process Specialist
Data governance specialist optimizing SAP master data, procurement, AP, and planning processes. Supporting RHI Magnesita’s global refractory-products manufacturing operations.
Consultant, Climate Risk
Climate Risk Consultant supporting Ramboll’s sustainability consulting engagements. Analyzing climate risks, emissions, resources, and financial opportunities for corporate clients.
Consultant, Climate Risk
Climate risk consultant helping Ramboll’s global architecture, engineering, and consultancy teams assess climate and sustainability opportunities. Building analytics, financial models, and client recommendations for sustainable change.
Consultant, Climate Risk
Climate risk consultant helping Ramboll, a global architecture, engineering, and consultancy company, assess sustainability opportunities. Analyzing climate risks, emissions, resources, and financial models for client engagements.
Risk Portfolio Manager, LatAm
Portfolio Manager owning quantitative monitoring and underwriting of high-ticket merchant credit portfolios. R2 provides embedded financial solutions to Latin American SMBs.
Document and Vendor Governance Specialist
Document and vendor governance specialist managing enterprise print standards, workflows, and vendors. Supporting PacificSource’s healthcare operations through compliance, reporting, and process improvements.
Document and Vendor Governance Specialist
Document governance specialist managing enterprise print workflows, inventories, and vendor performance for PacificSource healthcare. Identifying efficiency and cost-saving opportunities while supporting fulfillment initiatives.
Document and Vendor Governance Specialist
Document and Vendor Governance Specialist managing PacificSource’s healthcare print governance, document lifecycle, and fulfillment vendors. Improving compliance, reporting, workflows, and operational costs.
Document and Vendor Governance Specialist
Document and vendor governance specialist managing enterprise print standards, workflows, and fulfillment vendors. Supporting PacificSource healthcare operations through compliance, reporting, and cost-saving improvements.
Senior IGA Consultant, Identity Governance and Access Controls
Senior IGA Consultant analyzing identity governance evidence and access controls for regulated organizations. Drafting role designs, findings, and delivery actions at cybersecurity consultancy Intelance.
Principal IAM Consultant, Identity Governance, Data Access
Principal IAM Consultant designing identity governance and data access models for Intelance’s cybersecurity and enterprise architecture clients. Defining Microsoft-based permissions, controls, and implementation plans.
VP, Global Compensation Administration – Governance
VP leading global compensation administration and governance at Circana, which provides AI, technology, and data solutions to CPG companies, manufacturers, and retailers. Building scalable pay processes, systems, and governance.
Data Governance and Master Data Management Expert
Data governance expert modernizing Stibo MDM workflows for Kaizen Analytix, a global technology consulting firm. Establishing enterprise policies, stewardship models, controls, and data-quality practices.
Decision Scientist, Risk
Decision Scientist optimizing Plooto’s payment risk decisioning through SQL, Python, experimentation, and segmentation. Reducing manual reviews and customer friction while maintaining payment-loss performance.