FluidStack

2 weeks ago

GRC Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Own Fluidstack’s end-to-end compliance program across SOC 2 Type II, ISO 27001, NIST 800-53, and FedRAMP Moderate equivalency. Run continuous evidence collection, control monitoring, access reviews, and evidence refreshes in Vanta and in-house tooling. Maintain the policy/procedure set, drive audit and assessment cycles, manage POA&M to closure, and integrate new sites and teams while mapping controls to keep coverage consistent as the organization scales.

Location: New York

Workplace: Onsite

Employment Type: Full time

Job Function: Government Affairs & Public Policy

Key Responsibilities

•Run the day-to-day compliance program end to end across SOC 2 Type II, ISO 27001, NIST 800-53, and FedRAMP Moderate equivalency.
•Draft, maintain, and manage the review cycle so policies and documentation keep pace with controls as the program grows.
•Perform recurring control operations including access reviews, control owner attestations, and evidence refreshes.
•Coordinate audit and assessment cycles with external auditors and manage POA&M findings to closure.
•Onboard new sites and teams into the compliance program by mapping their systems to existing controls to maintain consistent coverage.

Pay and Benefits

Salary: USD 200,000 - 270,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionPensionPaid Leave

Key Requirements

•Operate controls and collect evidence against at least one major framework (SOC 2, ISO 27001, NIST 800-53, or FedRAMP) through a real audit.
•Own compliance documentation including policies, procedures, and control narratives, keeping them current as the environment changes.
•Defend how a control runs in practice to auditors/assessors and close findings without escalating every question.
•Work with engineers, system owners, and employees to obtain evidence and adherence on time.
•Watch the compliance portfolio continuously to catch stale controls, expired access grants, or coverage gaps before an assessor finds them.

Experience:Continuous complianceGRCSecurity compliance

Skills:Extreme ownershipVelocityFirst principlesHigh intensityStakeholder management

Tech Stack:VantaSOC 2ISO 27001NIST 800-53FedRAMPContinuous evidence collectionControl monitoringPOA&M

Company Brief

FluidStack

Builds and deploys large-scale GPU cloud infrastructure for AI labs, enterprises and governments, providing high-performance AI training and inference capacity and rapid data-center deployment services.

Industry: Cloud Computing

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: New York, United States

Founded: 2017

Glassdoor: 4.7

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

FluidStack

2 weeks ago

GRC Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: New York

Workplace: Onsite

Employment Type: Full time

Job Function: Government Affairs & Public Policy

Key Responsibilities

•Run the day-to-day compliance program end to end across SOC 2 Type II, ISO 27001, NIST 800-53, and FedRAMP Moderate equivalency.
•Draft, maintain, and manage the review cycle so policies and documentation keep pace with controls as the program grows.
•Perform recurring control operations including access reviews, control owner attestations, and evidence refreshes.
•Coordinate audit and assessment cycles with external auditors and manage POA&M findings to closure.
•Onboard new sites and teams into the compliance program by mapping their systems to existing controls to maintain consistent coverage.

Pay and Benefits

Salary: USD 200,000 - 270,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionPensionPaid Leave

Key Requirements

•Operate controls and collect evidence against at least one major framework (SOC 2, ISO 27001, NIST 800-53, or FedRAMP) through a real audit.
•Own compliance documentation including policies, procedures, and control narratives, keeping them current as the environment changes.
•Defend how a control runs in practice to auditors/assessors and close findings without escalating every question.
•Work with engineers, system owners, and employees to obtain evidence and adherence on time.
•Watch the compliance portfolio continuously to catch stale controls, expired access grants, or coverage gaps before an assessor finds them.

Experience:Continuous complianceGRCSecurity compliance

Skills:Extreme ownershipVelocityFirst principlesHigh intensityStakeholder management

Tech Stack:VantaSOC 2ISO 27001NIST 800-53FedRAMPContinuous evidence collectionControl monitoringPOA&M

Company Brief

FluidStack

Industry: Cloud Computing

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: New York, United States

Founded: 2017

Glassdoor: 4.7

Website LinkedIn Glassdoor