GRC Associate – Contract

Job not on LinkedIn

🔥 2 minutes ago

🌵 Arizona, California, +14 more states – Remote

🌵 Arizona – Remote 🏄 California – Remote ⛰️ Colorado – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote 🌪️ Kansas – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🌲 Oregon – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🤠 Texas – Remote ☕ Washington – Remote 🍑 Georgia – Remote

💵 $50 - $65 / hour

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Unit21

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

💳 Fintech

🔒 Cybersecurity

📋 Compliance

💰 $34M Series B on 2021-07

Fintech • Cybersecurity • Compliance

Unit21 is a customizable platform designed to transform fraud prevention and anti-money laundering (AML) operations. It enables organizations to run custom detection logic, automate investigations, and seamlessly manage regulatory compliance. With features like real-time payment fraud prevention, transaction monitoring, and automated case management, Unit21 provides comprehensive solutions that adapt to unique business needs, ensuring security and efficiency in the financial technology space.

📋 Description

• Run day-to-day GRC work in Drata, including control mapping, integration connections, gap closure and evidence collection • Coordinate SOC 2 Type II audit activities, including auditor coordination, evidence requests, walkthroughs, exception tracking and remediation • Run biannual and quarterly PCI reviews and track external scan findings to closure • Prepare recurring SOC 2 evidence, including access and group reviews, audit-log exports and incident summaries • Track postmortem follow-ups and control gaps across Engineering, Infra/DevOps, IT, HR and People Ops • Respond to security questionnaires, DDQs and customer vendor-risk reviews • Maintain the security answer library and obtain Security sign-off for new or changed security claims • Build customer screenshot evidence packs and maintain the Trust Center • Review customer security requirements in MSAs and DPAs and maintain the requirements tracker • Run annual security policy reviews and manage the policy exceptions log • Coordinate the annual risk assessment, maintain the risk register and prepare leadership risk reviews • Coordinate the annual BCP/DR test and write the customer-facing summary • Track HR-side SOC 2 controls, including background checks, security training, onboarding and offboarding • Conduct security assessments of internal-use and non-critical vendors and support critical vendor and subprocessor reviews • Maintain the subprocessor list and drive customer notifications when it changes • Run intake and review for new SaaS apps, OAuth apps, AI tools and MCP servers • Handle day-to-day compliance for data-provider reseller agreements, starting with LexisNexis • Build and manage a compliance calendar of recurring controls, reviews, audits and renewals • Send a monthly GRC status report to the Head of Security

🎯 Requirements

• 2–4 years in GRC, security compliance or IT audit, ideally at a B2B SaaS company selling to regulated customers • Supported at least one SOC 2 Type II audit, including evidence collection, control testing and auditor requests • Answered customer security questionnaires or DDQs • Clear writing; customer-facing answers should need only light review • Organized and persistent, able to track many small asks across teams and follow up without escalation • Hands-on experience with a compliance automation platform such as Drata, Vanta, Secureframe or OneTrust • Fintech, BaaS or banking-vendor experience • ISO 27001 experience • AI governance experience, including NIST AI RMF or ISO 42001 • PCI DSS exposure • Security+, CISA or ISO 27001 Implementer certification • US work location in one of: AZ, CA, CO, GA, ID, IL, KS, MA, MD, NJ, NY, OR, PA, RI, TX, WA • Availability for approximately 20 hours per week and at least 4 hours of overlap with US Pacific time

🏖️ Benefits

• Competitive salary and pre-IPO equity • 100% company-paid medical, dental, and vision insurance for employees • Unlimited PTO and generous leave programs • 401(k) • Learning & development stipend • Home office setup support • Flexible hours within the week • Renewable 6-month initial contract term • 30 days' notice to end contract

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume