GRC Analyst

Franklin Fitch; New York (NY); On-site; USD 90,000 - 130,000; Full time

Job summary

Franklin Fitch is seeking a GRC Analyst in Manhattan, New York, to support customer trust, security assurance and compliance across SOC 2, ISO 27001, GDPR and related regimes. The role partners with security and engineering to articulate controls to customers and audits.

The successful candidate will translate complex security concepts into concise responses, manage risk assessments, and help scale trust processes as the client base grows in the fintech and enterprise space.

Qualifications

• Experience supporting customer-facing security, compliance or trust functions at a SaaS or cloud-native company.
• Ability to translate technical security concepts into clear written responses.
• Understanding enterprise security expectations across cloud infrastructure, access control, data protection and incident response.

Responsibilities

• Own customer trust and security assurance, including responding to security inquiries and risk assessments.
• Be the primary point of contact for customer security reviews and provide accurate, timely responses.
• Maintain and improve security documentation and response materials to reflect current controls.
• Translate technical security controls into customer-facing explanations.
• Support compliance across SOC 2, ISO 27001, GDPR, and other frameworks; assist evidence collection and readiness.
• Identify themes in customer inquiries and feed insights back to security and compliance teams.
• Streamline trust workflows as scale increases.

Skills

Security governance

Customer-facing communication

SaaS security

Risk assessment

Incident response

Tools

AWS

Kubernetes

IAM

Job description

GRC Analyst — AI Fintech Scale-Up | Manhattan, New York

An AI company building analyst tooling for the world's largest investment banks, private equity funds and hedge funds is hiring a GRC Analyst to support its customer trust, security assurance and compliance programmes as it scales globally.

This is a hands-on role at a company with strong product-market fit and serious backing, at the point where enterprise customer demands are outgrowing the processes built to handle them.

What you'll own

• Customer trust and security assurance, including responding to security inquiries and risk assessments
• Acting as a key point of contact for customer security reviews, partnering internally to give accurate, consistent and timely responses
• Maintaining and improving security documentation and response materials so they stay aligned to current systems and controls
• Working with security and engineering to understand technical controls and articulate them in a customer-facing context
• Supporting compliance across SOC 2, ISO 27001, ISO 42001, the EU AI Act, UK Cyber Essentials and GDPR, including evidence collection and audit readiness
• Spotting recurring themes and gaps in customer inquiries and feeding them back into security and compliance practice
• Streamlining trust workflows as customer volume and enterprise requirements grow

What you'll need

• Experience supporting customer-facing security, compliance or trust functions at a SaaS or cloud-native company
• The ability to translate technical security concepts into clear, concise written responses
• An understanding of enterprise security expectations across cloud infrastructure, access control, data protection and incident response
• Strong attention to detail, and the ability to run multiple parallel requests without dropping quality
• Sound judgment on sensitive or ambiguous security questions

Nice to have

• Security questionnaires, audits or third-party risk assessments
• Cloud security concepts (AWS/GCP, Kubernetes, IAM)
• Experience scaling trust, GRC or compliance processes in a growing organisation
• Supporting enterprise customers, particularly in financial services

The environment

Fast-paced and high-intensity, with a small, dense team. You'd need to be comfortable with ambiguity and self-directed enough to own outcomes rather than wait for direction.