GRC Analyst

Zip
San Francisco
Workplace: HybridFull timeUSD 95,000 - 150,000 annuallyFunction: OtherExperience: 2+ yearsEducation: bachelorsSkills: ["Written communication","Verbal communication","Stakeholder management","Risk assessment","Compliance operations"]

Own and drive Zip’s governance, risk, and compliance activities, including user access reviews, internal audits, and vendor risk assessments. Lead customer security questionnaire responses and guide control owners to operationalize internal controls. Partner with internal teams and external auditors to support SOC 1, SOC 2, and ISO 27001 audits, while maintaining and expanding security policies and standards to meet evolving regulatory requirements.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Zip
Zip
1 month ago

GRC Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Own and drive Zip’s governance, risk, and compliance activities, including user access reviews, internal audits, and vendor risk assessments. Lead customer security questionnaire responses and guide control owners to operationalize internal controls. Partner with internal teams and external auditors to support SOC 1, SOC 2, and ISO 27001 audits, while maintaining and expanding security policies and standards to meet evolving regulatory requirements.
Location: San Francisco
Workplace: Hybrid
Employment Type: Full time
Seniority: Mid level

Key Responsibilities

  • •Drive periodic compliance activities such as user access reviews, internal audits, and vendor risk assessments.
  • •Curate responses for customers’ security, compliance, and governance teams during due diligence and security questionnaires.
  • •Guide internal control owners and stakeholders to understand requirements and operationalize controls.
  • •Collaborate with internal stakeholders and external auditors for third-party audits including SOC 1, SOC 2, and ISO 27001.
  • •Develop, maintain, and lead adoption of security policies, standards, and guidelines to meet regulatory requirements.

Pay and Benefits

Salary: USD 95,000 - 150,000 annually
Perks:Health InsuranceDentalVisionStartup EquityPaid Leave401kPaid ParentalHome OfficeCommuter Benefits

Key Requirements

  • •Bachelor’s degree in a related field.
  • •2+ years of experience in GRC, information security consulting, cybersecurity risk, audits, or similar roles.
  • •Strong written and verbal communication skills with technical and non-technical stakeholders.
  • •Familiarity with and participation in SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, and/or FedRAMP frameworks.
  • •Familiarity with information security fundamentals for cloud software systems.
Experience:2+ yearsGRCInformation securityCybersecurity riskAuditsCloud software
Education:Bachelor's in related field
Skills:Written communicationVerbal communicationStakeholder managementRisk assessmentCompliance operations
Tech Stack:SOC 1SOC 2ISO 27001ISO 42001PCI DSSWCAGFedRAMP

Company Brief

Zip
Provides buy-now-pay-later (BNPL) and digital payment solutions for consumers and merchants across multiple markets, enabling flexible payments, consumer credit, and merchant financing services.
Industry: Lending
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Sydney, Australia
Founded: 2013
WebsiteLinkedIn