Governance, Risk & Compliance Analyst

B Capital; San Francisco (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Perplexity is seeking a Governance, Risk & Compliance Analyst to shape our compliance and risk management program. You will lead efforts across SOC2, ISO 27001 and HIPAA, ensure GDPR/CCPA/CPRA readiness, and design scalable audit processes to support growth.

You will also build a GRC platform and drive cross-functional collaboration with IT, Security and Engineering. The successful candidate will have 6+ years in audit and compliance, demonstrated ability to translate complex requirements into

Qualifications

• 6+ years of experience leading engagements in audit and compliance.
• Ability to translate complex compliance requirements into scalable automation using AI agents and custom tooling.
• Experience in cloud-native environments in high-tech companies.

Responsibilities

• Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA.
• Ensure compliance with certification requirements.
• Maintain compliance with GDPR, CCPA, CPRA and other privacy regulations.
• Design and build scalable audit management processes and documentation systems for future expansion.
• Build internal GRC platform and tooling.
• Conduct risk assessments and mitigate data security and compliance risks.
• Write, update and enact policies capturing security, privacy, and AI safety requirements.
• Monitor AI regulatory landscape to keep the company compliant.

Skills

GRC leadership

Communication

Cross-functional collaboration

Self-motivation

Automation (AI)

Tools

AI agents

Job description

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world‑class team. You will help shape our compliance and risk management program. If you are a self‑motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast‑growing startup and help revolutionize the way people search and interact online.

What You’ll Do

• Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA.
• Ensuring compliance with certification requirements
• Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations
• Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks
• Build internal GRC platform and tooling
• Conduct risk assessments and mitigate data security and compliance risks
• Write, update and enact policies capturing security, privacy, and AI safety requirements
• Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices

What You’ll Bring

• 6+ years of experience leading engagements in audit and compliance
• Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling
• Worked in high tech companies in cloud‑native environments
• Able to translate complex compliance requirements into clear and actionable work‑streams
• Strong commitment to cross‑functional collaboration with IT, Security, GTM, and Engineering
• Self‑motivated, detailed and organized, with a diligent approach to project completion
• Excellent written, verbal, and interpersonal communication skills