Security Governance Risk & Compliance Analyst I

🕒 August 17

🇺🇸 United States – Remote

💵 $49.7k - $73.1k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 22%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Commerce

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🛍️ eCommerce

🤖 Artificial Intelligence

🤝 B2B

eCommerce • Artificial Intelligence • B2B

Commerce is a company that provides flexible, AI-driven solutions designed for next-generation commerce. It connects various tools and systems to drive growth and unlock data potential for businesses. With a focus on delivering seamless, personalized experiences at scale, Commerce supports businesses through tailored solutions and end-to-end services. Its platform includes offerings like BigCommerce, Feedonomics, and Makeswift, aimed at enabling innovation, optimizing data, and creating customizable digital experiences.

📋 Description

• Support third-party risk assessments by reviewing vendor security questionnaires, documentation, and due diligence materials • Maintain and update the vendor risk register and track remediation activities to closure • Assist with internal control testing and evidence collection for SOC 2, ISO 27001, PCI-DSS, and other compliance frameworks • Help coordinate audit requests and liaise with internal stakeholders to gather required documentation • Monitor policy and procedure documentation and flag items due for review or update • Assist in tracking risk exceptions and escalate items requiring senior review • Support reporting and metrics preparation for leadership and committee-level reviews • Contribute to process improvement initiatives as the program scales • Apply curiosity about AI tools to cybersecurity and compliance work within a globally distributed GRC team

🎯 Requirements

• 0–2 years of experience in GRC, risk operations, compliance, or a related function; internships count • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business, or a related field; equivalent work experience also considered • Genuine interest in GRC engineering and willingness to learn quickly in a fast-paced environment • Hands-on familiarity with Claude Code or similar AI coding tools • Ability to consider applications of AI coding tools to cybersecurity or GRC work; hobby projects welcome • Strong written and verbal communication skills • High attention to detail and comfort working with documentation, spreadsheets, and tracking tools • Proficiency in Microsoft Office or Google Workspace • Coursework or certification in cybersecurity or risk management such as Security+ or CISA is nice to have • Exposure to SOC 2, ISO 27001, NIST, or PCI-DSS is nice to have • Experience in an operations or process-driven role is nice to have

🏖️ Benefits

• Variable compensation such as bonus or commission, where applicable • Equity, where applicable • Benefits in accordance with local policies • Inclusive and accessible hiring experience • Government ID and biometric verification process via Persona