GRC Analyst – Governance, Risk, Compliance

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $102.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 5%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

YipitData

WebsiteLinkedInAll Job Openings

201 - 500 employees

💸 Finance

🏢 Enterprise

Finance • Enterprise • Data Analysis

YipitData is a company that specializes in providing accurate, timely insights on over 1,000 companies by analyzing billions of data points every day. They offer detailed research to help investors make smarter decisions and assist companies in increasing market share, sales, and customer base. YipitData delivers alternative data through a range of datasets, including receipt data, card data, web data, and publicly reported earnings. This data is used to track market trends, consumer behavior, and product categories, enabling businesses to gain transparency into performance metrics. Their services cater to investors, companies, and data partners, with a strong focus on accuracy and near real-time data delivery.

📋 Description

• Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion • Keep YipitData audit-ready throughout the year • Test security controls and determine whether they are operating effectively • Conduct risk assessments, identify gaps, and help develop realistic remediation plans • Map controls across SOC 2 and other frameworks • Coordinate access reviews, control testing, policy reviews, risk updates, and audit evidence requests • Review vendors and assess whether their security practices meet expectations • Support customer security questionnaires by locating, validating, and standardizing responses • Translate compliance requirements into clear actions for non-GRC teams • Draft and maintain policies, standards, control narratives, risk records, metrics, and program documentation • Track findings and remediation commitments and follow up with owners • Simplify and automate repetitive GRC work • Help develop governance for AI products, agents, and new data-handling practices • Partner with Security, IT, Engineering, Legal, Finance, and People teams

🎯 Requirements

• Experience in security, compliance, risk, audit, privacy, vendor risk, or a related field • Hands-on SOC 2 experience, including supporting Type I or Type II audits, testing controls, validating evidence, coordinating with auditors, and tracking remediation through completion • Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks • Strong writing skills and ability to explain complicated requirements clearly • Ability to identify inconsistencies, missing information, and unsupported answers • Ability to ask follow-up questions and respectfully challenge findings • Ability to organize multiple workstreams, meet deadlines, and follow through • Strong communication skills with technical and non-technical teams • Good judgment, ownership, and ability to work independently or escalate when needed • Interest in governance for AI and emerging technologies • Ability to work flexible hours, with most employees working East Coast hours • Must be based in the United States

🏖️ Benefits

• Flexible work hours • Flexible vacation • Generous 401K match • Parental leave • Team events • Wellness budget • Learning reimbursement • Equity • Remote work flexibility • Equal employment opportunity