AI-Driven GRC Analyst for ISO 27001, SOC 2 & PCI

Vercel Inc.; San Francisco (CA); Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Equity / equity-based compensation

Inclusive Healthcare Package

Mentorship and events for network and

Flexible Time Off

WFH budget for space setup

Job summary

Vercel Inc. is seeking a Governance, Risk and Compliance (GRC) Analyst to build GRC with AI. The role is hybrid and can be based in San Francisco, NYC, or London, with three days in the office weekly. You will develop automations for audit evidence and manage audits across teams.

You will apply security controls to AI vendors, maintain ISO 27001, SOC 2, HIPAA, PCI DSS, and lead remediation efforts while supporting customer security documentation.

Qualifications

• 3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment.
• Applied security or privacy controls to AI systems or AI vendors, such as model access, data handling, or third-party risk review.
• Built security policies and technical controls into the software development lifecycle (SDLC) with engineering partners.
• Led compliance projects across multiple business units and seniority levels.

Responsibilities

• Assess AI tools and vendors against security, privacy, and compliance requirements, and run company compliance and ethics training
• Maintain the internal controls behind ISO 27001, SOC 2, HIPAA, and PCI DSS compliance, and drive remediation to completion with documented progress
• Use AI tooling to build automations that collect audit evidence, monitor controls, and draft security questionnaire responses, and report on controls maturity scores
• Manage annual audit deliverables, write treatment plans, and track completion across teams
• Answer customer compliance inquiries and maintain customer-facing security and compliance documentation

Skills

Audit lifecycle

Security controls

AI tooling

Cross-functional leadership

Tools

Automation tooling

AI tooling platforms

Job description

Vercel Inc. is seeking a Governance, Risk and Compliance (GRC) Analyst to build GRC with AI. The role is hybrid and can be based in San Francisco, NYC, or London, with three days in the office weekly. You will develop automations for audit evidence and manage audits across teams.

You will apply security controls to AI vendors, maintain ISO 27001, SOC 2, HIPAA, PCI DSS, and lead remediation efforts while supporting customer security documentation.