Zip

1 day ago

GRC Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 17 hours agoStatus: Live

Job Summary

Own and drive Zip’s governance, risk, and compliance activities, including user access reviews, internal audits, and vendor risk assessments. Lead customer security questionnaire responses and guide control owners to operationalize internal controls. Partner with internal teams and external auditors to support SOC 1, SOC 2, and ISO 27001 audits, while maintaining and expanding security policies and standards to meet evolving regulatory requirements.

Location: San Francisco

Workplace: Hybrid

Employment Type: Full time

Seniority: Mid level

Key Responsibilities

•Drive periodic compliance activities such as user access reviews, internal audits, and vendor risk assessments.
•Curate responses for customers’ security, compliance, and governance teams during due diligence and security questionnaires.
•Guide internal control owners and stakeholders to understand requirements and operationalize controls.
•Collaborate with internal stakeholders and external auditors for third-party audits including SOC 1, SOC 2, and ISO 27001.
•Develop, maintain, and lead adoption of security policies, standards, and guidelines to meet regulatory requirements.

Pay and Benefits

Salary: USD 95,000 - 150,000 annually

Perks:Health InsuranceDentalVisionStartup EquityPaid Leave401kPaid ParentalHome OfficeCommuter Benefits

Key Requirements

•Bachelor’s degree in a related field.
•2+ years of experience in GRC, information security consulting, cybersecurity risk, audits, or similar roles.
•Strong written and verbal communication skills with technical and non-technical stakeholders.
•Familiarity with and participation in SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, and/or FedRAMP frameworks.
•Familiarity with information security fundamentals for cloud software systems.

Experience:2+ yearsGRCInformation securityCybersecurity riskAuditsCloud software

Education:Bachelor's in related field

Skills:Written communicationVerbal communicationStakeholder managementRisk assessmentCompliance operations

Tech Stack:SOC 1SOC 2ISO 27001ISO 42001PCI DSSWCAGFedRAMP

Company Brief

Zip

Provides buy-now-pay-later (BNPL) and digital payment solutions for consumers and merchants across multiple markets, enabling flexible payments, consumer credit, and merchant financing services.

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Sydney, Australia

Founded: 2013

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Zip