GRC Analyst — AI Governance & Security (Onsite 4 days)

Metropolis; Los Angeles (CA); On-site; USD 100,000 - 135,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan

Short-term and long-term disability

Stock option plan

Bonus plans

Job summary

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our Security team in Los Angeles. You will mature information security policies, drive employee training, and pioneer our AI governance framework across Legal, Tech, and Procurement.

You will manage risk assessments for new AI tools, ensure SOC 2 and PCI-DSS controls, and report metrics to senior leadership. This role requires on-site work, with four days in the office and a competitive compensation package.

Qualifications

• 3+ years of experience in information security GRC, cybersecurity training, or technology compliance.
• Experience with security awareness programs and cross-functional accountability.
• Understanding of AI and machine learning data security.
• Knowledge of SOC 2 and PCI-DSS frameworks.
• Ability to explain regulatory needs to non-technical employees.

Responsibilities

• Author, update, and enforce corporate security policies to guarantee cross-departmental compliance.
• Deploy and manage required information security training campaigns as the platform owner.
• Transform static policies into interactive modules with quizzes for mandatory sign-offs.
• Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams.
• Conduct structured risk assessments on emerging tools and internal AI models to maintain guardrails.
• Report training metrics, policy exceptions, and risk postures to senior management.
• Review vendor security profiles to mitigate security risk.

Skills

GRC experience

Security training

Cross-functional collaboration

AI/ML data security

Regulatory knowledge

Communication skills

Education

Bachelor's degree in Cybersecurity/Information Systems

Tools

SOC 2

PCI-DSS

Job description

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our Security team in Los Angeles. You will mature information security policies, drive employee training, and pioneer our AI governance framework across Legal, Tech, and Procurement.

You will manage risk assessments for new AI tools, ensure SOC 2 and PCI-DSS controls, and report metrics to senior leadership. This role requires on-site work, with four days in the office and a competitive compensation package.