GRC Analyst (Remote - Worldwide)

Candidates can apply from any country. This role sits within the compliance and security team of a fast-growing developer tools company with a fully remote, globally distributed workforce. You will help make risk management, audit and compliance an everyday part of how the company operates. You will work with engineering, security, IT and legal to set risk tolerance, keep SOC 2 and ISO/IEC 27001:2022 programs current, and answer customer and vendor security questionnaires quickly and accurately.

What you'll do

• Run company-wide and product-change risk assessments, scoring likelihood and impact, proposing treatments, and presenting results to leadership to inform risk tolerance decisions.
• Maintain the risk register and track remediation through to closure, reporting status to compliance and security leaders.
• Monitor controls on a rolling basis, using automated tests where available and manual testing where not, then triage failures, prioritize by risk and assign owners and due dates.
• Support internal audits, whether run by an external partner or in-house, by proposing scope from the risk register, providing evidence and driving findings to closure.
• Manage day-to-day compliance program operations, including evidence collection, control owner follow-up and audit readiness.
• Build custom control tests with AI coding tools and work with engineering and IT to pull evidence directly from source systems rather than relying on screenshots.

What you need

• At least 3 years of experience in GRC, internal audit or security compliance, ideally at a SaaS or technology company.
• Working knowledge of SOC 2 and ISO 27001 controls and of compliance platforms such as Drata or Vanta, plus evidence from cloud and identity systems such as AWS, GCP, Google Workspace and Okta.
• Clear written and verbal communication with both technical and non-technical audiences.
• Experience working in async or globally distributed teams.
• Comfort with ambiguity and a fast pace of work.
• Fluent English for day-to-day async collaboration.

Open to applicants anywhere in the world.

How to apply

Sign up free on i'llTip to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.