GRC Analyst I - AI-Driven Commerce Security

BigCommerce Pty.; Northern (KY); Hybrid; USD 50,000 - 73,000; Full time

Job summary

Commerce is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You’ll support day-to-day risk and vendor assessments, ensure documentation, and assist audits.

This is an opportunity for early career professionals to grow within a globally distributed team, with exposure to AI tools like Claude Code and a strong emphasis on accuracy and cross-functional collaboration. The role focuses on risk assessments, control testing, and audit coordination, offering growth in enterprise

Qualifications

• 0–2 years of GRC, risk operations, or compliance experience.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Business, or related field.
• Genuine interest in GRC engineering and a willingness to learn quickly in a fast-paced environment required
• Hands‑on familiarity with Claude Code or similar AI coding tools, and an ability to think through how they could be applied to cybersecurity or GRC work (hobby projects welcome)
• Strong written and verbal communication skills - you'll be working cross-functionally and with external vendors
• High attention to detail and comfort working with documentation, spreadsheets, and tracking tools
• Proficiency in Microsoft Office or Google Workspace
• Nice To Have Coursework or certification in cybersecurity or risk management (Security+, CISA, etc.)
• Exposure to compliance frameworks such as SOC 2, ISO 27001, NIST, or PCI-DSS
• Experience in an operations or process-driven role (internship or otherwise)

Responsibilities

• Support third-party risk assessments by reviewing vendor security questionnaires, documentation, and due diligence materials
• Maintain and update the vendor risk register and track remediation activities to closure
• Assist with internal control testing and evidence collection for compliance frameworks (SOC 2, ISO 27001, PCI-DSS, etc.)
• Help coordinate audit requests and liaise with internal stakeholders to gather required documentation
• Monitor policy and procedure documentation, flagging items due for review or update
• Assist in tracking risk exceptions, escalating items that require senior review
• Support reporting and metrics preparation for leadership and committee-level reviews
• Contribute to process improvement initiatives as the program scales

Skills

Written communication

Verbal communication

Detail orientation

Cross-functional collaboration

Education

Bachelor's degree in Computer Science

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Systems

Bachelor's degree in Business

Tools

Claude Code

Microsoft Office

Google Workspace

Job description

Commerce is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You’ll support day-to-day risk and vendor assessments, ensure documentation, and assist audits.

This is an opportunity for early career professionals to grow within a globally distributed team, with exposure to AI tools like Claude Code and a strong emphasis on accuracy and cross-functional collaboration. The role focuses on risk assessments, control testing, and audit coordination, offering growth in enterprise