GRC Analyst I: AI-Driven Security & Compliance

Embedded Shishya; United States; Remote; USD 50,000 - 73,000; Full time

Job summary

Commerce seeks a detail-oriented GRC Analyst to join our Governance, Risk & Compliance team. You will support day-to-day risk and compliance operations, assess third-party vendors, maintain policy documentation, track control evidence, and support audits with a globally distributed team.

Ideal candidates have up to 2 years in GRC, a related degree, and a hands-on interest in applying AI tools like Claude Code to cybersecurity and compliance work. The role offers growth from day one.

Qualifications

• 0–2 years of experience in GRC, risk operations, compliance, or a related function
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business, or a related field
• Genuine interest in GRC engineering and willingness to learn quickly in a fast-paced environment
• Hands-on familiarity with Claude Code or similar AI coding tools and applying them to cybersecurity or GRC work
• Strong written and verbal communication skills for cross-functional collaboration
• High attention to detail and comfort with documentation, spreadsheets, and tracking tools
• Proficiency in Microsoft Office or Google Workspace

Responsibilities

• Support third-party risk assessments by reviewing vendor security questionnaires, documentation, and due diligence materials
• Maintain and update the vendor risk register and track remediation activities to closure
• Assist with internal control testing and evidence collection for compliance frameworks (SOC 2, ISO 27001, PCI-DSS, etc.)
• Help coordinate audit requests and liaise with internal stakeholders to gather required documentation
• Monitor policy and procedure documentation, flagging items due for review or update
• Assist in tracking risk exceptions, escalating items that require senior review
• Support reporting and metrics preparation for leadership and committee-level reviews
• Contribute to process improvement initiatives as the program scales

Skills

GRC experience

AI tooling familiarity

Communication skills

Office / Workspace proficiency

Attention to detail

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business, or related field

Tools

Claude Code

Job description

Commerce seeks a detail-oriented GRC Analyst to join our Governance, Risk & Compliance team. You will support day-to-day risk and compliance operations, assess third-party vendors, maintain policy documentation, track control evidence, and support audits with a globally distributed team.

Ideal candidates have up to 2 years in GRC, a related degree, and a hands-on interest in applying AI tools like Claude Code to cybersecurity and compliance work. The role offers growth from day one.