GRC Analyst

🕒 August 27

🇺🇸 United States – Remote

💵 $102.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

YipitData

WebsiteLinkedInAll Job Openings

201 - 500 employees

💸 Finance

🏢 Enterprise

Finance • Enterprise • Data Analysis

YipitData is a company that specializes in providing accurate, timely insights on over 1,000 companies by analyzing billions of data points every day. They offer detailed research to help investors make smarter decisions and assist companies in increasing market share, sales, and customer base. YipitData delivers alternative data through a range of datasets, including receipt data, card data, web data, and publicly reported earnings. This data is used to track market trends, consumer behavior, and product categories, enabling businesses to gain transparency into performance metrics. Their services cater to investors, companies, and data partners, with a strong focus on accuracy and near real-time data delivery.

📋 Description

• Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion • Keep YipitData audit-ready throughout the year • Test security controls and determine whether they are operating effectively • Conduct risk assessments, identify gaps, and help develop remediation plans • Map controls across SOC 2 and other frameworks • Coordinate access reviews, control testing, policy reviews, risk updates, and audit evidence requests • Review vendors and assess their security practices • Support customer security questionnaires by validating accurate and consistent answers • Translate compliance requirements into clear actions for business teams • Draft and maintain policies, standards, control narratives, risk records, metrics, and program documentation • Track findings and remediation commitments and follow up with owners • Simplify and automate repetitive GRC work • Develop governance approaches for AI products, agents, and emerging data practices • Partner with Security, IT, Engineering, Legal, Finance, and People teams

🎯 Requirements

• Experience in security, compliance, risk, audit, privacy, vendor risk, or a related field • Hands-on SOC 2 experience, including supporting Type I or Type II audits, testing controls, validating evidence, coordinating with auditors, and tracking remediation through completion • Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks • Strong writing skills and ability to explain complicated requirements clearly • Ability to identify inconsistencies, missing information, and gaps • Ability to ask follow-up questions and respectfully challenge issues • Ability to organize multiple workstreams, meet deadlines, and follow through • Ability to communicate with technical and non-technical teams • Ability to work independently and know when to escalate • Interest in governance for AI and emerging technologies

🏖️ Benefits

• Flexible work hours • Flexible vacation • Generous 401K match • Parental leave • Team events • Wellness budget • Learning reimbursement • Equity • Fully remote work within the United States • Flexible, people-centric work environment focused on ownership, respect, and trust