GRC Analyst: Security & Compliance Lead

Fireworks

San Mateo

On-site

PHP 480,000 - 720,000

Full time

5 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Fireworks, a leading AI SaaS platform, is seeking a GRC Analyst to mature our compliance program across SOC 2, ISO, HIPAA, GDPR, and privacy frameworks. You’ll work hands-on with access reviews, risk management, third-party risk, and audit readiness in a fast-moving environment.

The role offers growth toward audit leadership, program strategy, and broader ownership as the team scales. You will partner with engineering, IT, operations, legal, and sales to translate control requirements into

Qualifications

3–5 years in GRC, IT audit, information security, or related field.
Working knowledge of SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR, or CCPA.
Experience with GRC platforms and IAM concepts.
Strong written communication and cross-functional collaboration.

Responsibilities

Support day-to-day GRC operations including access reviews, certifications, and policy control triage.
Assist risk assessments, maintain the risk register, and track remediation to closure.
Coordinate third-party risk assessments and monitor vendor/subprocessor risk.
Run internal audits and support external audits with evidence collection.
Maintain GRC platform data, automate evidence tests, and ensure audit readiness year-round.
Collaborate with engineering, IT, operations, legal, and sales across teams.