Governance, Risk & Compliance Analyst

United States Digital Space LLC; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

United States Digital Space LLC in San Francisco seeks a Governance, Risk & Compliance Analyst to mature our security program and manage regulatory obligations, shaping compliance and risk practices to build customer trust in a fast-growing startup transforming search and interaction online.

You will implement SOC 2, ISO 27001 and HIPAA, drive privacy updates for GDPR/CCPA/CPRA, and design scalable audit processes.

Qualifications

• 6+ years leading audit and compliance engagements.
• Ability to translate complex compliance requirements into scalable automation using AI agents.
• Experience in high-tech cloud-native environments.
• Translate complex compliance requirements into clear and actionable work streams.
• Strong collaboration with IT, Security, GTM, and Engineering.
• Detail-oriented, self-motivated and organized with strong execution.

Responsibilities

• Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA.
• Ensure GDPR, CCPA, CPRA and other privacy regulations compliance.
• Design scalable audit management processes and documentation systems.
• Build internal GRC platform and tooling.
• Conduct risk assessments and mitigate data security and compliance risks.
• Write, update and enact policies capturing security, privacy, and AI safety requirements.
• Follow and help shape AI regulatory standards and best practices.

Skills

Audit & Compliance

AI automation

Cloud-native

Cross-functional collaboration

Communication skills

Tools

Custom tooling

Job description

the company is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online.

What You've Do

Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements

• Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations

• Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks

• Build internal GRC platform and tooling

• Conduct risk assessments and mitigate data security and compliance risks

• Write, update and enact policies capturing security, privacy, and AI safety requirements

• Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices

What You've Bring

6+ years of experience leading engagements in audit and compliance

• Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling

• Worked in high tech companies in cloud-native environments

• Able to translate complex compliance requirements into clear and actionable work-streams

• Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering

• Self-motivated, detailed and organized, with a diligent approach to project completion

• Excellent written, verbal, and interpersonal communication skills