AI-Powered GRC Analyst: Security & Compliance

Vercel Corp; Buffalo (NY); Ibrido; USD 134.000 - 202.000; Tempo pieno

Vantaggi offerti da questo lavoro

Equity

Healthcare package

Mentorship & events

WFH budget

Descrizione del lavoro

Vercel is seeking a Governance, Risk and Compliance (GRC) Analyst to build GRC with AI, working in a hybrid setup across San Francisco, New York City, or London with three days in the office. You will assess AI tools and vendors, manage audits, and develop automations for audit evidence and questionnaire responses.

The role requires hands-on experience with SOC 2, ISO 27001, PCI DSS, or HIPAA, and the ability to lead cross-functional compliance projects.

Competenze

• Supports the audit lifecycle for SOC 2, ISO 27001, PCI DSS or HIPAA in cloud env.
• Applies security/privacy controls to AI systems/vendors.
• Built security policies into SDLC with engineering partners.
• Led cross-unit compliance projects across seniority levels.

Mansioni

• Assess AI tools/vendors against security, privacy, compliance requirements.
• Maintain controls behind ISO 27001, SOC 2, HIPAA, PCI DSS and drive remediation.
• Build automations to collect audit evidence and monitor controls.
• Manage annual audit deliverables and track completion across teams.
• Answer customer compliance inquiries and maintain docs.

Conoscenze

Audit lifecycle

SOC 2

ISO 27001

PCI DSS

HIPAA

Cloud security

AI governance

Formazione

CISM

CISSP

CCEP

Strumenti

GRC tooling

Descrizione del lavoro

Vercel is seeking a Governance, Risk and Compliance (GRC) Analyst to build GRC with AI, working in a hybrid setup across San Francisco, New York City, or London with three days in the office. You will assess AI tools and vendors, manage audits, and develop automations for audit evidence and questionnaire responses.

The role requires hands-on experience with SOC 2, ISO 27001, PCI DSS, or HIPAA, and the ability to lead cross-functional compliance projects.