GRC Analyst

FluidStack
New York
Workplace: OnsiteFull timeUSD 200,000 - 270,000 annuallyFunction: Government Affairs & Public PolicySkills: ["Extreme ownership","Velocity","First principles","High intensity","Stakeholder management"]

Own Fluidstack’s end-to-end compliance program across SOC 2 Type II, ISO 27001, NIST 800-53, and FedRAMP Moderate equivalency. Run continuous evidence collection, control monitoring, access reviews, and evidence refreshes in Vanta and in-house tooling. Maintain the policy/procedure set, drive audit and assessment cycles, manage POA&M to closure, and integrate new sites and teams while mapping controls to keep coverage consistent as the organization scales.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
FluidStack
FluidStack
1 month ago

GRC Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 14 hours agoStatus: Live

Job Summary

Own Fluidstack’s end-to-end compliance program across SOC 2 Type II, ISO 27001, NIST 800-53, and FedRAMP Moderate equivalency. Run continuous evidence collection, control monitoring, access reviews, and evidence refreshes in Vanta and in-house tooling. Maintain the policy/procedure set, drive audit and assessment cycles, manage POA&M to closure, and integrate new sites and teams while mapping controls to keep coverage consistent as the organization scales.
Location: New York
Workplace: Onsite
Employment Type: Full time
Job Function: Government Affairs & Public Policy

Key Responsibilities

  • •Run the day-to-day compliance program end to end across SOC 2 Type II, ISO 27001, NIST 800-53, and FedRAMP Moderate equivalency.
  • •Draft, maintain, and manage the review cycle so policies and documentation keep pace with controls as the program grows.
  • •Perform recurring control operations including access reviews, control owner attestations, and evidence refreshes.
  • •Coordinate audit and assessment cycles with external auditors and manage POA&M findings to closure.
  • •Onboard new sites and teams into the compliance program by mapping their systems to existing controls to maintain consistent coverage.

Pay and Benefits

Salary: USD 200,000 - 270,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionPensionPaid Leave

Key Requirements

  • •Operate controls and collect evidence against at least one major framework (SOC 2, ISO 27001, NIST 800-53, or FedRAMP) through a real audit.
  • •Own compliance documentation including policies, procedures, and control narratives, keeping them current as the environment changes.
  • •Defend how a control runs in practice to auditors/assessors and close findings without escalating every question.
  • •Work with engineers, system owners, and employees to obtain evidence and adherence on time.
  • •Watch the compliance portfolio continuously to catch stale controls, expired access grants, or coverage gaps before an assessor finds them.
Experience:Continuous complianceGRCSecurity compliance
Skills:Extreme ownershipVelocityFirst principlesHigh intensityStakeholder management
Tech Stack:VantaSOC 2ISO 27001NIST 800-53FedRAMPContinuous evidence collectionControl monitoringPOA&M

Company Brief

FluidStack
Builds and deploys large-scale GPU cloud infrastructure for AI labs, enterprises and governments, providing high-performance AI training and inference capacity and rapid data-center deployment services.
Industry: Cloud Computing
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Funding: Series A
Headquarters: New York, United States
Founded: 2017
Glassdoor
Glassdoor: 4.7
WebsiteLinkedInGlassdoor