AI Compliance & Risk Analyst

You.com; San Francisco (CA); Hybrid; USD 150,000 - 180,000; Full time

Benefits offered by this job

Flexible PTO

100% health insurance coverage for policyholders

401k program with 3% match

Work-from-home stipend

Technology stipend

Job summary

You.com is looking for a GRC Analyst to join our Security, IT, and Privacy function in San Francisco. This role will be crucial in building and maintaining compliance programs and ensuring trust with our customers. Responsibilities include managing compliance work across various frameworks and conducting vendor risk assessments.

The ideal candidate has 3–5 years of experience in GRC or Information Security compliance and strong communication skills, translating security and risk into actionable terms for product teams.

Qualifications

• 3–5 years of experience in GRC, Information Security compliance, or a related field.
• Hands-on experience with SOC 2 or ISO 27001 audits.
• Familiarity with GDPR, CCPA, and emerging AI regulations.

Responsibilities

• Own and manage compliance programs across multiple frameworks.
• Coordinate end-to-end audit activities.
• Conduct vendor and third-party risk assessments.

Skills

GRC experience

Information Security compliance

Communication skills

Vendor risk assessments

Regulatory knowledge

Job description

You.com is looking for a GRC Analyst to join our Security, IT, and Privacy function in San Francisco. This role will be crucial in building and maintaining compliance programs and ensuring trust with our customers. Responsibilities include managing compliance work across various frameworks and conducting vendor risk assessments.

The ideal candidate has 3–5 years of experience in GRC or Information Security compliance and strong communication skills, translating security and risk into actionable terms for product teams.