Governance, Risk, and Compliance Analyst

About This Role

Support and mature the information security and compliance program, focusing on maintaining compliance with frameworks like SOC 2 and ISO/IEC 27001. Develop and maintain security policies, procedures, and support vendor risk and customer security questionnaire processes.

Responsibilities

• Support ongoing compliance efforts for SOC 2 Type II and ISO/IEC 27001, including audits, evidence collection, and remediation tracking
• Draft, review, and maintain security policies, standards, procedures, and supporting documentation
• Coordinate with internal stakeholders (IT, Security, Engineering, HR, Legal) to ensure controls are implemented and documented
• Manage and respond to vendor and customer security questionnaires (SIG, CAIQ, custom questionnaires, etc.)
• Assist with vendor risk management, including risk assessments and documentation review
• Support risk assessments and maintain a risk register
• Map controls and manage audit evidence across compliance frameworks
• Track audit findings, remediation efforts, and compliance metrics
• Help maintain compliance artifacts, audit evidence repositories, and control mappings
• Stay current on relevant compliance and security best practices

Requirements

• 2+ years of experience in GRC, compliance, or information security role
• Hands-on experience supporting SOC 2 and/or ISO/IEC 27001 programs
• Experience creating and maintaining security policies and procedures
• Familiarity with vendor risk management and security questionnaire processes
• Strong written communication and documentation skills
• Ability to work cross-functionally and manage multiple compliance efforts simultaneously
• Experience with audit management platforms (e.g., Vanta, Drata, Secureframe, Tugboat Logic)

Qualifications

• 2+ years of experience in a GRC, compliance, or information security role

Nice to Have

• Experience working in a remote environment
• Familiarity with additional frameworks (NIST 800-53/171, CIS, HIPAA)

Skills

* Required skills

Benefits

Certifications