GRC Analyst – Governance, Risk, Compliance

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $102.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 5%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

YipitData

WebsiteLinkedInAll Job Openings

201 - 500 employees

💸 Finance

🏢 Enterprise

Finance • Enterprise • Data Analysis

YipitData is a company that specializes in providing accurate, timely insights on over 1,000 companies by analyzing billions of data points every day. They offer detailed research to help investors make smarter decisions and assist companies in increasing market share, sales, and customer base. YipitData delivers alternative data through a range of datasets, including receipt data, card data, web data, and publicly reported earnings. This data is used to track market trends, consumer behavior, and product categories, enabling businesses to gain transparency into performance metrics. Their services cater to investors, companies, and data partners, with a strong focus on accuracy and near real-time data delivery.

📋 Description

• Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion • Keep YipitData audit-ready throughout the year • Test security controls and determine whether they work effectively • Conduct risk assessments, identify gaps, and help develop remediation plans • Map controls across SOC 2 and other frameworks • Coordinate access reviews, control testing, policy reviews, risk updates, and audit evidence requests • Review vendors and assess their security practices • Support customer security questionnaires by validating accurate and consistent answers • Translate compliance requirements into clear actions • Draft and maintain policies, standards, control narratives, risk records, metrics, and program documentation • Track findings and remediation commitments and follow up with owners • Simplify and automate repetitive GRC work • Help develop governance for AI products, agents, and new data-handling practices • Partner with Security, IT, Engineering, Legal, Finance, and People teams

🎯 Requirements

• Experience in security, compliance, risk, audit, privacy, vendor risk, or another related field • Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks • Strong writing skills • Ability to evaluate whether security and compliance expectations are being met • Ability to connect policy or framework requirements to real-world people and systems • Ability to identify inconsistencies, missing information, and gaps • Comfort asking follow-up questions and respectfully challenging issues • Ability to organize multiple workstreams, meet deadlines, and follow through • Ability to communicate with technical and non-technical teams • Ability to work independently and know when to escalate • Interest in governance for AI and emerging technologies

🏖️ Benefits

• Flexible work hours • Flexible vacation • Generous 401K match • Parental leave • Team events • Wellness budget • Learning reimbursement • Equity • Remote work flexibility • Equal employment opportunity