GRC Compliance Analyst

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GoTo

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2000

☁️ SaaS

📡 Telecommunications

🏢 Enterprise

💰 Seed Round on 2013-11

SaaS • Telecommunications • Enterprise

GoTo is a company offering all-in-one business communication and remote IT management solutions. Their product lineup includes GoTo Connect, an all-in-one communication platform providing features like cloud-based phone systems, digital channels, and AI-powered contact centers designed to improve customer experiences. Additionally, GoTo offers IT management and support services like remote access, mobile device management, and IT asset management to enhance enterprise productivity and security. They cater to various industries, such as healthcare, legal, education, and professional services, ensuring seamless communication and IT support from any location on any device.

📋 Description

• Coordinating audits across ISO 27001, SOC 2, PCI-DSS, HIPAA, NIS2, SOX, and C5, including managing auditor relationships, driving evidence collection, and tracking remediation activities to completion. • Performing control assessments and testing across technical and administrative domains, partnering with engineering and security teams to evaluate control design and effectiveness. • Partnering with Engineering, Security, IT, and Product stakeholders to understand technical architectures and translate them into audit-ready control narratives. • Leveraging AI tools, automation, and emerging technologies to streamline evidence collection, control testing, and reporting activities. • Administering and enhancing GRC platforms while developing metrics and dashboards that provide visibility into compliance posture and control effectiveness.

🎯 Requirements

• 3+ years of experience in information security compliance, audit, or risk management within a technology environment. • Strong understanding of cloud architecture, IAM, infrastructure, and SDLC controls, enabling effective collaboration and communication with technical teams. • Experience working with one or more compliance frameworks, such as ISO 27001, SOC 2, PCI-DSS, HIPAA, NIST 800-53, and NIS2. • Strong audit communication skills: you know how to manage auditors, push back when evidence requests are out of scope, and defend a control position when you're right. • Interest in leveraging technology and AI tools to improve productivity and streamline compliance activities. • Bonus Qualifications • Experience with compliance automation, continuous monitoring initiatives, or GRC platform development. • Experience with platforms such as Thoropass, AuditBoard, or Drata. • Experience building AI-driven workflows or automations that reduce compliance toil. • Experience integrating GRC tooling with engineering, cloud, identity, or monitoring platforms. • Experience implementing continuous assurance capabilities.

🏖️ Benefits

• Comprehensive health benefits • Generous paid time off, including paid holidays, volunteer days, quarterly self-care days, and company-designated no-meeting days • Tuition reimbursement and access to instructor-led and on-demand learning and development programs • The Thrive Global Wellness Program, a confidential Employee Assistance Program (EAP), a wellness app and one-on-one wellness coaching • Employee-led communities and programs, including Employee Resource Groups (ERGs), GoTo Gives, and charitable matching