GRC Analyst

FloQast

. Manage FloQast's internal controls inventory as controls are added or changed .

Posted 10/21/2026full-timeUnited StatesMid-LevelSenior💰 $115,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing internal controls and compliance frameworks, including ISO 27001, SOC 1, and SOC 2. Proficient in documentation, audit support, and collaboration with cross-functional teams to enhance security and compliance practices.

Highest-signal resume keywords

ISO 27001 ComplianceSOC 1 Audit SupportSOC 2 Audit SupportCISSP CertificationCISA Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Internal Controls ManagementRoot Cause AnalysisProcess DocumentationAudit Evidence MonitoringInformation Security Fundamentals

Soft Skills

Strong Organizational SkillsFlexible and Adaptable

Tools & Technologies

AWSAzureGCP

Certifications & Qualifications

CompTIA CertificationCISSP CertificationCISA CertificationCISM Certification

Industry Keywords

ComplianceSecurityPrivacyISO 27701ISO 42001PCIHIPAANISTCIS

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Manage FloQast's internal controls inventory as controls are added or changed
Ensure control owners, testing procedures, related policies, and other information are accurately documented and updated
Work with control owners to document and annually update process narratives
Initiate, monitor, and follow up on monthly and quarterly control activities and audit evidence
Advise and advocate for security and compliance across the company
Facilitate development and maintenance of policies, standards, processes, and guidelines
Support annual internal and external ISO 27001, ISO 27701, ISO 42001, SOC 1, SOC 2, and similar audits
Aggregate internal control issues, perform root cause analysis, and collaborate on remediation
Serve as point of contact for compliance stakeholders across departments
Support customer assurance activities, including security questionnaires and customer discussions
Participate in cross-functional project teams
Perform other assigned tasks supporting company goals

Requirements

What you’ll need

3-5+ years of relevant experience
Knowledge and familiarity with at least one security, privacy, and compliance practice, including SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, PCI, or HIPAA
Understanding of information security and privacy fundamentals
Certification preferred in CompTIA, CISSP, CISA, CISM, or cloud platforms such as AWS, Azure, or GCP
Understanding of AI governance or leveraging AI tools to improve compliance and audit efficiency
Familiarity with NIST, CIS, and other information security frameworks is a bonus but not required
Experience working for a software development company is a bonus but not required
Strong organizational skills
Flexible and adaptable in a high-growth, start-up environment
Visa sponsorship is NOT available at this time

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Family Forming benefits
Life & Disability Insurance
Unlimited Vacation
Participation in Employee Stock Program
Equal opportunity employment