Governance, Risk & Compliance Analyst

Nicely Co.; Tulsa (OK); On-site; USD 85,000 - 125,000; Full time

Job summary

Nicely Co. is seeking a Governance, Risk & Compliance Analyst to strengthen risk-based security, threat detection, incident readiness, and vulnerability reduction while building identity and secure-by-design practices.

You will partner across functions, turning company priorities into clear, dependable work and shaping the evolving cybersecurity program in an early-stage company. This role offers autonomy and meaningful ownership to influence processes and outcomes.

Qualifications

• Demonstrated capability in risk-based security and threat detection.
• Strong written and verbal communication with cross-functional partners.
• Ability to organize ambiguous work and document decisions.
• Comfort building systems in an early-stage environment.
• Commitment to confidentiality, security, and inclusive collaboration.

Responsibilities

• Own day-to-day work across risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices.
• Translate priorities of the Governance, Risk & Compliance Analyst role into documented plans, decisions, and measurable outcomes.
• Build lightweight, repeatable processes that fit an early-stage company and can mature over time.
• Collaborate across functions to resolve dependencies and deliver complete outcomes.
• Identify risks early, recommend proportionate solutions, and escalate consequential decisions.
• Maintain accurate documentation and handle company, customer, and employee information responsibly.
• Use relevant evidence and feedback to improve quality, efficiency, and stakeholder experience.
• Communicate progress, constraints, priorities, and results clearly to affected teammates.

Skills

Risk-based security

Threat detection

Incident readiness

Vulnerability reduction

Identity management

Secure-by-design practices

Job description

Governance, Risk & Compliance Analyst

Help build Nicely Co.'s risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices as Governance, Risk & Compliance Analyst, with meaningful ownership in an early-stage company.

Position overview

Nicely Co. is seeking a Governance, Risk & Compliance Analyst to strengthen risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices. This role will turn company priorities into clear, dependable work while partnering directly with colleagues across functions.Nicely Co. is an early-stage company, so this position will help create the processes and internal systems behind the work, not merely inherit a mature playbook. The successful candidate will use sound judgment, communicate tradeoffs, and operate with appropriate autonomy.Responsibilities may evolve as the company grows. This is an opportunity to influence how the Cybersecurity function develops, establish useful standards, and leave behind systems that scale responsibly.

Responsibilities

• Own day-to-day work across risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices.
• Translate the priorities of the Governance, Risk & Compliance Analyst role into documented plans, decisions, and measurable outcomes.
• Build lightweight, repeatable processes that fit an early-stage company and can mature over time.
• Collaborate across functions to resolve dependencies and deliver complete outcomes.
• Identify risks early, recommend proportionate solutions, and escalate consequential decisions.
• Maintain accurate documentation and handle company, customer, and employee information responsibly.
• Use relevant evidence and feedback to improve quality, efficiency, and stakeholder experience.
• Communicate progress, constraints, priorities, and results clearly to affected teammates.

Qualifications

• Demonstrated capability relevant to risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices.
• Judgment and ownership appropriate for the Governance, Risk & Compliance Analyst scope.
• Strong written and verbal communication with both specialists and cross-functional partners.
• Ability to organize ambiguous work, make progress independently, and document decisions.
• Comfort building systems in an early-stage environment where priorities may evolve.
• Commitment to ethical conduct, confidentiality, security, accessibility, and inclusive collaboration.

Preferred qualifications

• Experience with modern methods and tools used in Cybersecurity.
• Experience in a startup, small business, or other resource-conscious environment.
• Evidence of improving a workflow, standard, product, service, or measurable outcome.
• Relevant education, certification, portfolio, or equivalent practical experience.
• Flexible work arrangements where applicable.
• Opportunity to help build an early-stage company.
• Direct impact on company growth and operating quality.
• Cross-functional collaboration and professional development opportunities.
• Significant ownership over assigned responsibilities.
• Opportunity for responsibilities to expand as the company grows.