Senior GRC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior GRC Analyst at Doppler managing security and compliance programs. Ensuring SOC 2 Type II and ISO 27001 certifications while collaborating across teams.
Responsibilities:
- Maintain Doppler's SOC 2 Type II and ISO 27001 certifications end-to-end: evidence collection, control monitoring, audit coordination, and deficiency remediation
- Lead the compliance work for our next certifications, including gap assessments, policy updates, and required documentation
- Evaluate additional certifications and attestations on an ongoing basis as customer and market requirements evolve
- Own day-to-day administration of our GRC platform (Vanta), including control mapping, evidence workflows, and audit readiness
- Lead our security working group: facilitate regular risk identification sessions, policy updates, maintain the threat register, track remediation progress, and drive accountability across teams
- Design and maintain security controls mapped to our chosen frameworks (SOC 2, ISO 27001, etc.), ensuring they're practical and consistently operating
- Coordinate penetration testing cycles and work directly with engineering to track and close findings
- Author and maintain security policies that are enforceable and grounded in regulatory requirements (GDPR, PCI, and others relevant to a secrets management provider)
- Support business continuity and disaster recovery governance
- Respond to security questionnaires and RFPs promptly and accurately
- Participate in customer security reviews and calls; represent our compliance posture credibly to security teams, procurement, and compliance officers
- Maintain public-facing trust documentation that reflects our actual program
- Partner with sales on security-sensitive enterprise deals, especially in regulated industries or where compliance is a gating factor
- Translate compliance status and risk posture into clear, non-jargon updates for leadership and cross-functional stakeholders
- Lead security awareness and compliance training for internal teams
- Influence engineering and product roadmaps where security controls intersect with product decisions
Requirements:
- 5+ years in security, compliance, or GRC, with direct ownership of SOC 2 Type II and ISO 27001 programs in a cloud product environment where you've run audit cycles, not just supported them
- Hands-on experience with Vanta (or a comparable GRC platform) and a genuine interest in automating compliance workflows rather than relying on spreadsheets
- Technical fluency: you can read a pen test report, understand cloud architecture decisions, and have substantive conversations with engineers about control design and risk tradeoffs
- Strong understanding of how auditors think, ideally from having been on the auditor side, or from running enough cycles that you've internalized their perspective
- Familiarity with PCI DSS and GDPR requirements; experience with self-attestation or certification work is a strong plus
- Experience supporting enterprise sales cycles where security is a procurement requirement, including responding to complex security questionnaires
- Excellent communication skills across audiences. You can brief the CEO on risk posture and turn around and explain the same issue to an engineer in implementation terms
- Relevant certifications (CISA, CISSP, CISM, CRISC, or equivalent) preferred.
Benefits:
- Equity at an early-stage, fast-growing startup
- Premium health insurance (medical, dental, vision)
- Guilt Free Unlimited PTO - 3-week minimum strongly encouraged!
- Upward Mobility
- Learning and Development Stipend
- Wealth Advisor
- 401k
- Pregnancy & Family Leave
- Fertility & Adoption Benefits
- Equal Compensation (regardless of gender or race)
Similar Jobs
Compliance Program Coordinator
Compliance Program Coordinator providing administrative support for AICPA Peer Review Program. Managing workflows, ensuring compliance, and supporting peer review processes.
Technical GRC Specialist
Technical GRC Specialist focusing on enhancing cybersecurity measures and managing vendor risk at an AI-powered support automation platform. Collaborating with teams to ensure compliance and audit readiness.
Corporate Telecom Compliance Manager
Strategy & Operations role focusing on telecommunications compliance at Twilio. Leading strategic execution and governance for global communications platform compliance initiatives.
Vice President, Compliance & Risk Management
Vice President Compliance & Risk Management leading healthcare compliance initiatives and risk management strategy for Emerus. Develop and implement comprehensive frameworks to support patient safety and ethical standards.
Senior Engineer, GRC – Audit & Compliance
Senior Engineer overseeing audit and compliance programs at NextGen Healthcare, ensuring alignment with regulatory and security requirements. Leading audit lifecycle and optimizing GRC solutions for efficient compliance operations.
Compliance Specialist
Compliance Manager providing governance and assurance for compliance obligations and processes. Overseeing the organization’s Integrated Management System and ensuring compliance with regulatory frameworks.
Regulatory Consultant – CMC, Small Molecule Products
Support execution of global regulatory CMC strategy and submissions for small molecule products. Collaborate with cross-functional teams at Syneos Health to deliver effective regulatory compliance in the biopharmaceutical industry.
Regulatory Labeling Manager – Artwork Development, Source Text Review
Labeling Artwork Reviewer ensuring compliance in pharmaceutical product packaging through detailed review and collaboration with various teams. Focused on regulatory requirements and global market alignment.
GRC Analyst
GRC Analyst at Primer responsible for managing Governance, Risk & Compliance programs. Collaborates with engineering and security teams to maintain compliance and manage audit readiness.
Regulatory Manager
US Regulatory Manager at Unchained ensuring compliance with U.S. financial services regulations. Involves collaboration across departments for effective risk management and policy implementation.
Compliance Officer
Compliance Officer managing AML/CTF compliance and operations at Allocated Bullion Exchange. Overseeing day-to-day operations including onboarding and regulatory obligations.
Onboarding Compliance Specialist
Onboarding Compliance Specialist ensuring HR compliance for clinical workforce at Charlie Health. Assisting in personnel file management and regulatory adherence for new hires.
Director, Regulatory Affairs
Director of Regulatory Affairs leading regional regulatory strategy and stakeholder engagement for Grid United. Focus on developing frameworks and supporting regulatory approvals for electric transmission projects.
Senior Regulatory Affairs Associate
Regulatory Affairs Senior Associate at Amgen assisting in regulatory document creation and submission. Supporting US regulatory activities and compliance under USRL supervision.
Regulatory and Start Up Specialist
Regulatory Specialist managing Site Activation for clinical studies in life sciences. Ensuring compliance with regulations and quality in deliverables for Swedish sites.
Senior Business SOX Compliance Manager
Senior Business SOX Compliance Manager leading business process control framework at Zillow. Involves assessments, integrations, and team development in a distributed work environment.
Assistant Manager, Special Education Compliance
Assistant Manager for IDEA supporting special education compliance and program implementation in various Texas and remote locations. Collaborating with staff, students, and families in achieving academic success.
Regional Food Safety Quality and Regulatory Lead
Canada Food Safety Quality and Regulatory POD Lead providing safety leadership across plants in Canada. Collaborating with stakeholders for quality and regulatory compliance while driving continuous improvement initiatives.
Senior Advisor, Pharmacy & Care Delivery Compliance
Senior Advisor for compliance within Evernorth Care Delivery and Pharmacy. Responsible for evaluating compliance and managing audits and reports across regulatory requirements.
Executive Director, Regulatory Affairs – Global
Executive Director leading global regulatory affairs for biopharmaceutical company, focusing on international regulatory strategy and compliance for oncology products.