Entry-Level GRC Analyst: Security & Compliance

BigCommerce Pty; Northern (KY); Hybrid; USD 50,000 - 73,000; Full time

Job summary

Commerce, a leader in enterprise risk and compliance, seeks a detail-oriented GRC Analyst for its Governance, Risk & Compliance team. You will support day-to-day risk and compliance operations, assess third-party vendors, maintain policy documentation, and help with audits.

Ideal candidates have 0–2 years in GRC, a related bachelor's degree, and a willingness to learn quickly in a fast-paced environment. Familiarity with Claude Code and AI tooling is a plus.

Qualifications

• 0–2 years of experience in GRC, risk operations, compliance, or related function.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business or related field.
• Interest in GRC engineering and willingness to learn quickly in a fast-paced environment.
• Hands-on familiarity with Claude Code or similar AI coding tools, hobby projects welcome.
• Strong written and verbal communication skills for cross-functional work.

Responsibilities

• Support third-party risk assessments by reviewing vendor security questionnaires and due diligence materials.
• Maintain and update the vendor risk register and track remediation through to closure.
• Assist with internal control testing and evidence collection for SOC 2, ISO 27001, PCI-DSS, etc.
• Coordinate audit requests and liaise with internal stakeholders to gather documentation.
• Monitor policy and procedure documentation and flag items due for review or update.
• Track risk exceptions and escalate items requiring senior review.
• Support reporting and metrics for leadership and committee reviews.

Skills

GRC

Risk operations

Compliance

Communication skills

Documentation

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business or related field

Tools

Claude Code

AI coding tools

Security tooling

Job description

Commerce, a leader in enterprise risk and compliance, seeks a detail-oriented GRC Analyst for its Governance, Risk & Compliance team. You will support day-to-day risk and compliance operations, assess third-party vendors, maintain policy documentation, and help with audits.

Ideal candidates have 0–2 years in GRC, a related bachelor's degree, and a willingness to learn quickly in a fast-paced environment. Familiarity with Claude Code and AI tooling is a plus.