You

4 weeks ago

Governance, Risk, and Compliance Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

GRC Analyst responsible for building and maintaining compliance programs across SOC 2, ISO 27001, GDPR, CCPA, HIPAA, and FedRAMP. Coordinate end-to-end audits, leverage AI for metrics, manage vendor risk and due diligence, support procurement with security reviews, and translate regulatory requirements into actionable controls within a fast-paced, security-focused org.

Location: San Francisco

Workplace: Hybrid

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Own and manage compliance programs across frameworks including SOC 2, ISO 27001, GDPR, CCPA, HIPAA, and FedRAMP
•Coordinate audit activities end-to-end: evidence collection, documentation, auditor responses, and remediation tracking
•Leverage AI and other tools to deliver metrics that stakeholders can consume and understand
•Conduct vendor and third-party risk assessments; manage the due diligence lifecycle for new and existing partners
•Help manage security and risk reviews (e.g. DDQs, VSQs) as part of the procurement process in collaboration with the Legal, Finance, and Security team

Pay and Benefits

Salary: USD 150,000 - 180,000 annually

Perks:Health Insurance401kRemote WorkPaid ParentalTech StipendWellness Stipend

Key Requirements

•3–5 years of experience in GRC, Information Security compliance, or a related field
•Hands-on experience with SOC 2 or ISO 27001 audits, including evidence collection and gap assessments
•Familiarity with privacy regulations: GDPR, CCPA, and ideally emerging AI regulatory frameworks (EU AI Act, etc.)
•Experience managing vendor risk assessments and third-party due diligence processes
•Strong written and verbal communication skills. You can explain compliance requirements to engineers and legal concepts to product managers

Experience:3-5 yearsAISecurityPrivacyEnterprise software

Skills:CommunicationOrganizationProblem-solvingWritingInfluencing

Certifications:CISACISMCRISC

Languages:English

Tech Stack:AIAutomationData analysis

Company Brief

You

You.com is an AI-powered, privacy-focused search engine and assistant that aggregates results from apps and web sources, offering customizable, conversational search experiences while prioritizing user privacy and ad-free options.

Industry: AI & Machine Learning

Company Size: Medium (51 to 250 employees)

Headquarters: San Francisco, United States

Founded: 2020

Website

Loading job details...

Preparing the role view and application actions.

You