GRC Analyst II

🔥 4 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Payscale

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2002

👥 HR Tech

☁️ SaaS

💰 $7M Venture Round on 2011-07

HR Tech • SaaS • Data

Payscale is a compensation data and software company that provides cloud-based compensation management solutions to HR leaders and compensation teams. Their products (Marketpay, Payfactors, Paycycle) combine proprietary pay data (over 250 billion data points) and AI-powered analytics to deliver market pricing, pay equity, compensation planning, and pay transparency tools for organizations of all sizes. Payscale offers services including customer success, implementation, managed services, and training; they produce research reports, surveys, and tools (salary research, cost-of-living calculator) to support data-driven pay decisions. The company serves enterprise and global clients, including Fortune 500 companies, and supports both employers and job seekers with compensation insights.

📋 Description

• Maintain Payscale's data classification program, including classification schema, tagging standards, and coordination with data owners to ensure accurate and consistent classification across systems and assets • Maintain the system classification and ownership inventory, partnering with teams to ensure systems are properly classified, attributed, and reviewed on a defined cadence • Support audit coordination activities for SOC 2 and other compliance frameworks. • Conduct vendor security assessments reviews. • Manage the policy management lifecycle, including drafting new policies and standards, tracking review cycles, coordinating approvals, and maintaining version control. • Identify control gaps or process improvement opportunities and partner with business units to implement and sustain effective controls.

🎯 Requirements

• Bachelor's degree in cybersecurity, information systems, or a related field • 2-4 years of work experience in GRC, information security, or a related field within a commercial SaaS or software company • Working knowledge of information security control frameworks such as SOC 2, ISO 27001, NIST 800-53, or CIS • Demonstrated experience with data classification frameworks and data governance concepts • Experience conducting vendor security assessments and managing third-party risk workflows • Hands-on experience with audit support activities, including evidence collection for SOC 2 or similar frameworks • Solid understanding of information security policies, standards, and procedures • Hands-on experience with GRC tools or platforms (e.g., Drata, ServiceNow GRC, or similar) • Strong written and verbal communication skills with the ability to engage both technical and non-technical stakeholders • Ability to manage multiple workstreams independently, prioritize effectively, and meet deadlines

🏖️ Benefits

• Holiday – Annual accrual for full time and part time employees • Sick Pay – Annual paid time off available • Company Paid and Statutory Holidays – Generous time off provided • 16 weeks of paid parental leave (top off) for birthing and non-birthing parents • Life Insurance - Basic life and AD&D benefit • Long term disability & Critical Illness – Coverage for certain types of illnesses and surgeries • Medical/Rx, Dental, Telehealth – Coverage for prescription, paramedical, medical supplies, emergency, basic and accidental dental, and virtual health care services • Health/Wellness Spending Account – Annual amount provided to you and your family for approved expenses • RRSP offered to employees with a 1:1 match up to 4% • BenefitHub – Discount marketplace, full access to all your benefits and provider portals • Annual remote work stipend to be used on wellness or home office equipment