GRC Analyst

FloQast; Chicago (IL); Hybrid; USD 115,000 - 155,000; Full time

Job summary

FloQast is seeking a GRC Analyst to strengthen our Compliance team. You will manage internal controls, policies, and testing procedures to support regulatory and information security needs. You’ll advise across departments, aligning workflows to build a best-in-class compliance program.

The role collaborates with ISO 27001/27701/42001 and SOC audits, drafting policy updates, and maintaining risk-aware culture. Hybrid in-office schedule applies, with ongoing review of office requirements.

Qualifications

• 3–5+ years of relevant experience.
• Knowledge and familiarity with security, privacy and compliance practices (SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, PCI, HIPAA).
• Understanding of information security and privacy fundamentals.
• Certifications preferred: CompTIA, CISSP, CISA, CISM, Cloud platforms such as AWS, Azure or GCP.
• Confidence and willingness to raise issues and concerns promptly.
• Understanding of AI governance or leveraging AI tools to improve compliance and audit efficiency.

Responsibilities

• Manage FloQast's internal controls inventory and update as new controls are added.
• Document control owners, testing procedures, and related policies; keep information up to date.
• Ensure process narratives are documented and updated annually for all controls.
• Initiate, monitor, and follow up on monthly and quarterly control activities with proper evidence for audits.
• Advocate for security and compliance across teams to foster a risk-aware culture.
• Draft and update policies, standards, processes, and guidelines with approvals.
• Support ISO 27001, ISO 27701, ISO 42001, SOC 1, SOC 2 audits with evidence requests and follow ups.
• Aggregate identified internal control issues and perform root cause analysis with remediation.
• Be the point of contact for stakeholders on compliance best practices.
• Support customer assurance activities, including security questionnaires.
• Participate in cross-functional project teams and other tasks as needed.

Skills

GRC experience

Security fundamentals

Privacy knowledge

AI governance familiarity

Tools

CompTIA

CISSP

CISA

CISM

AWS

Azure

GCP

Job description

FloQast is looking for a GRC Analyst to join our growing Compliance team. This position will support the management of compliance controls, organizational policies, procedures, and standards in support of regulatory compliance needs as well as organizational information security practices. You will advise and build relationships with key team members across multiple core departments, aligning department workflows to build a best-in-class compliance program.

The Compliance department at FloQast reports directly to the General Counsel and is responsible for ensuring FloQast maintains compliance with an array of security and privacy frameworks, including GDPR, CPRA, ISO 27001, ISO 27701, ISO 42001, SOC 1, and SOC 2. We are a team of in-house subject matter experts that advise, direct, train, and monitor the organization, resulting in daily interactions with all departments working together on a variety of unique and interesting business initiatives.

This role has a requirement of working in office 3 days per week, which may be subject to change based on team and business needs, as determined by the department leader. Please note that this requirement is subject to ongoing review and may be adjusted in the future.

Visa sponsorship is NOT available at this time

What You'll Do

• Manage FloQast's internal controls inventory as new controls are added and existing controls are changed
• Build upon the controls inventory to ensure control owners, testing procedures, related policies, and other pertinent information is accurately documented and kept up to date
• Work with control owners to ensure process narratives are documented and updated annually for all controls
• Initiate, monitor, and follow up on monthly and quarterly control activities to ensure they are completed on time and proper evidence is documented to meet audit requirements.
• Serve as a trusted advisor and advocate for security and compliance, engaging with teams across the company to foster a strong risk-aware culture.
• Facilitate the development and maintenance of policies, standards, processes, and guidelines by drafting the documentation update, gathering the appropriate approvals, and reporting on all changes in policy review meetings.
• Support annual internal and external ISO 27001, ISO 27701, ISO 42001 SOC 1, SOC 2, and other similar audits by scheduling audit interviews, submitting evidence requests to control owners, following up as needed to obtain evidence on time, reviewing evidence provided for accuracy, and facilitating follow up requests as needed to ensure our audits remain on schedule.
• Aggregate identified internal control issues and perform a root cause analysis and collaborate on remediation efforts
• Be an advocate for compliance best practices and the point of contact for stakeholders from departments throughout the company
• Support customer assurance activities, including completion of security questionnaires and participation in customer discussions.
• Participate in and contribute to cross-functional project teams
• Any other tasks that may be assigned to help the company meet its goals

What You'll Bring

• 3-5+ years of relevant experience
• Knowledge and familiarity with at least one security, privacy, and compliance practices (SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, PCI, HIPAA, etc)
• Understanding of information security and privacy fundamentals
• Certification preferred in one of the following: CompTIA, CISSP, CISA, CISM, Cloud platforms such as AWS, Azure or GCP
• Confidence and willingness to ask questions, raise issues, and concerns in a timely manner
• Understanding of AI governance or leveraging AI tools to improve compliance and audit efficiency

Nice To Haves/Others

• Familiarity with NIST, CIS, and other information security frameworks is a bonus but not required
• Experience working for a software development company is a bonus but not required
• Highly collaborative, detail-oriented, intellectually curious, with strong organizational skills and an authentically friendly demeanor
• Builder mindset, comfortable sharing ideas, trying new approaches and is focused on achieving team and company short and long term goals
• Flexible and adaptable in high growth, start-up environment

The base pay range for this position is $115,000 - $155,000. Compensation is not limited to base salary. FloQast values our Total Rewards, and offers a competitive and elaborate Benefits Package including, but not limited to, Medical, Dental, Vision, Family Forming benefits, Life & Disability Insurance, Unlimited Vacation, and participation in our Employee Stock Program. FloQast reserves the right to amend, change, alter, and revise pay ranges and benefits offerings at any time. All applicants acknowledge that by applying to this position you understand that this specific pay range is contingent upon meeting the qualifications and requirements of the role, and for the successful completion of the interview selection and process. It is at the Company's discretion to determine what pay is provided to a candidate within the range associated with the role.

#BI-Hybrid

About FloQast

FloQast is the leading AI-powered Accounting Transformation Platform, uniquely built by former accountants for accountants. We automate complex, recurring accounting workflows—transforming preparers into strategic reviewers and relieving accountants from tedious manual work. Our cloud-based solution is trusted by over 3,500 world-class accounting teams, including Lululemon, Doordash, and the MLB, to drive collaboration and financial accuracy. Driven by a mission to continuously elevate the profession, FloQast is redefining both the practice and the perception of accounting on a global scale.

Our Values Act As a Guiding Compass, Shaping Every Decision We Make, And Are Non-negotiable, Particularly In Our Hiring Process. Alongside Our Employees, Partners, And Customers, We Embody These Values Every Day

Unwaveringly Authentic

Ambitious with Integrity

Empowered to Grow

Committed to Collaboration

Customer Obsessed in All Ways

FloQast is regularly rated as a Best Place to Work!

• Inc. Magazine’s Best Workplaces in 2025, 2024, 2023, 2022, and 2021
• Best Places to Work by LA Business Journal since 2017 (that’s 9 years!)
• Built In’s Best Place to Work in Los Angeles 7 years in a row!

Because we are Customer Obsessed in All Ways, check out what our customers have to say about FloQast on G2 Crowd .

FloQast, Inc is committed to operating fair and unbiased recruitment procedures allowing all applicants an equal opportunity for employment, free from discrimination on the basis of religion, race, sex, age, sexual orientation, disability, color, ethnic or national origin, or any other classification as may be protected by applicable law. We aim to recruit the right people for the jobs we have to offer, and to assess applications on the basis of relevant skills, education, and experience. We welcome people of different backgrounds, experiences, abilities, and perspectives. We are an equal opportunity employer and strive to provide a professional and welcoming workplace for all employees.

Link to FloQast Recruiting AI Usage Policy

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.