GRC Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $102.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 5%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

YipitData

WebsiteLinkedInAll Job Openings

201 - 500 employees

💸 Finance

🏢 Enterprise

Finance • Enterprise • Data Analysis

YipitData is a company that specializes in providing accurate, timely insights on over 1,000 companies by analyzing billions of data points every day. They offer detailed research to help investors make smarter decisions and assist companies in increasing market share, sales, and customer base. YipitData delivers alternative data through a range of datasets, including receipt data, card data, web data, and publicly reported earnings. This data is used to track market trends, consumer behavior, and product categories, enabling businesses to gain transparency into performance metrics. Their services cater to investors, companies, and data partners, with a strong focus on accuracy and near real-time data delivery.

📋 Description

• Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion • Help keep YipitData audit-ready throughout the year • Test security controls and validate that evidence proves controls are operating • Conduct risk assessments and help develop remediation plans • Map controls across SOC 2 and other frameworks • Coordinate access reviews, control testing, policy reviews, risk updates, and audit evidence requests • Review vendors' security practices • Support customer security questionnaires • Translate compliance requirements into clear actions • Draft and maintain policies, standards, control narratives, risk records, metrics, and program documentation • Track findings and remediation commitments • Simplify and automate repetitive GRC work • Help develop governance for AI products, agents, and new data-handling methods • Partner with Security, IT, Engineering, Legal, Finance, and People teams

🎯 Requirements

• Experience in security, compliance, risk, audit, privacy, vendor risk, or another related field • Hands-on SOC 2 experience, including supporting Type I or Type II audits, testing controls, validating evidence, coordinating with auditors, and tracking remediation through completion • Familiarity with SOC 2, NIST CSF, or similar security and compliance frameworks • Strong writing skills to make complicated requirements clear • Ability to identify inconsistencies, missing information, and unsupported answers • Comfort asking follow-up questions and respectfully pushing back • Ability to organize multiple workstreams, meet deadlines, and follow through • Ability to communicate with technical and non-technical teams • Ability to work independently and know when to escalate • Interest in governance for AI and emerging technologies • Flexible availability, with most employees working East Coast hours

🏖️ Benefits

• Flexible work hours • Flexible vacation • Generous 401K match • Parental leave • Team events • Wellness budget • Learning reimbursement • Equity • Remote work opportunity