GRC Analyst – Governance, Risk, Compliance
YipitData
Posted: 10/19/2026
Compliance Specialist
Dane Street
Posted: 10/20/2026
IT Compliance Manager
FMX
Posted: 10/20/2026AzureMacOS
Senior Consultant, Environmental Compliance Engineer – Sustainable Operations
ERM
Posted: 10/19/2026
Senior Director, Risk and Compliance
S&P Global
Posted: 10/19/2026AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesOpenShift
Healthcare Regulatory Assurance Lead
Rackspace Technology
Posted: 10/19/2026Cyber Security
Senior Consultant, Environmental Compliance Engineer, Sustainable Operations
ERM
Posted: 10/19/2026
Program Compliance Manager
impact.com
Posted: 10/19/2026
Senior Compliance Officer
SEB
Posted: 10/19/2026Senior Compliance Officer
SEB
Posted: 10/19/2026
Account Compliance Manager
Solera, Inc.
Posted: 10/19/2026
Quality Compliance Specialist
Cardinal Health
Posted: 10/19/2026
Research Compliance Coordinator
MSK
Posted: 10/19/2026
Director – North America Regulatory Affairs
Johnson & Johnson
Posted: 10/19/2026
Director, Ethics & Compliance Investigations
Gilead Sciences
Posted: 10/19/2026Director – North America Regulatory Affairs
Johnson & Johnson
Posted: 10/19/2026
Retail Food Compliance Specialist
Augusta, Georgia Government
Posted: 10/19/2026
Senior Manager – Regulatory Compliance
Nium
Posted: 10/19/2026
Regulatory Exam and Remediation Performance & Oversight
Citi
Posted: 10/19/2026SQLTableau
Principal Consultant, EHS Compliance
ERM
Posted: 10/19/2026Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Governance, Risk, and Compliance (GRC) processes, including SOC 2 audits, risk assessments, and policy development. Capable of translating complex compliance requirements into actionable tasks while collaborating effectively with cross-functional teams.
Highest-signal resume keywords
SOC 2 ExperienceRisk AssessmentSecurity Controls TestingPolicy DevelopmentStrong Communication Skills
About the role
Key responsibilities & impact- Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion
- Keep YipitData audit-ready throughout the year
- Test security controls and determine whether they are operating effectively
- Conduct risk assessments, identify gaps, and help develop realistic remediation plans
- Map controls across SOC 2 and other frameworks
- Coordinate access reviews, control testing, policy reviews, risk updates, and audit evidence requests
- Review vendors and assess whether their security practices meet expectations
- Support customer security questionnaires by locating, validating, and standardizing responses
- Translate compliance requirements into clear actions for non-GRC teams
- Draft and maintain policies, standards, control narratives, risk records, metrics, and program documentation
- Track findings and remediation commitments and follow up with owners
- Simplify and automate repetitive GRC work
- Help develop governance for AI products, agents, and new data-handling practices
- Partner with Security, IT, Engineering, Legal, Finance, and People teams
Requirements
What you’ll need- Experience in security, compliance, risk, audit, privacy, vendor risk, or a related field
- Hands-on SOC 2 experience, including supporting Type I or Type II audits, testing controls, validating evidence, coordinating with auditors, and tracking remediation through completion
- Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks
- Strong writing skills and ability to explain complicated requirements clearly
- Ability to identify inconsistencies, missing information, and unsupported answers
- Ability to ask follow-up questions and respectfully challenge findings
- Ability to organize multiple workstreams, meet deadlines, and follow through
- Strong communication skills with technical and non-technical teams
- Good judgment, ownership, and ability to work independently or escalate when needed
- Interest in governance for AI and emerging technologies
- Ability to work flexible hours, with most employees working East Coast hours
- Must be based in the United States
Benefits
Comp & perks- Flexible work hours
- Flexible vacation
- Generous 401K match
- Parental leave
- Team events
- Wellness budget
- Learning reimbursement
- Equity
- Remote work flexibility
- Equal employment opportunity
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
GRC Workstream ManagementRisk IdentificationControl MappingEvidence CollectionRemediation PlanningAudit CoordinationControl TestingCompliance Framework FamiliarityGovernance for AIDocumentation Maintenance
Soft Skills
Strong Writing SkillsGood JudgmentOrganizational SkillsIndependent WorkFollow-Up Skills
Industry Keywords
SecurityComplianceAuditPrivacyVendor RiskNIST CSFEmerging TechnologiesEast Coast HoursControl NarrativesMetrics Tracking