GRC Analyst — Lead Security & Compliance at Scale

Zip; United States; On-site; USD 95,000 - 150,000; Full time

Benefits offered by this job

Start-up equity

Health, vision & dental coverage

Catered meals

Flexible PTO

401k plan

Home office stipend

Phone/internet reimbursement

Paid parental leave

Fertility stipend

Unlimited AI token usage

Job summary

Zip is seeking a GRC Analyst in the United States to drive compliance programs and security assurance as the company scales. You will help design and scale the GRC program, supporting growth into new markets and regulated industries.

Responsibilities include leading periodic audits, guiding control owners, and preparing customer responses during due diligence. You’ll collaborate with internal teams and external auditors on SOC 1, SOC 2, ISO 27001 and related certifications.

Qualifications

• 2+ years of experience in GRC, information security consulting, cybersecurity risk, audits, or similar roles.
• Strong written and verbal communication with technical and non-technical stakeholders.
• Familiarity with SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, FedRAMP.

Responsibilities

• Drive and perform periodic compliance-related activities, such as user access reviews, internal audits, and vendor risk assessments
• Lead conversations and curate responses for customers’ security, compliance, and governance teams in due diligence and security questionnaires
• Guide internal control owners and stakeholders to understand requirements, take accountability, and operationalize their controls.
• Collaborate with internal stakeholders and external auditors to support third party audits including SOC 1, SOC 2, and ISO 27001
• Develop, maintain, and lead the adoption of security policies, standards, and guidelines to ensure compliance with applicable regulatory requirements

Skills

GRC

Information security

Security risk assessment

Stakeholder communication

Education

Bachelor's degree

Job description

Zip is seeking a GRC Analyst in the United States to drive compliance programs and security assurance as the company scales. You will help design and scale the GRC program, supporting growth into new markets and regulated industries.

Responsibilities include leading periodic audits, guiding control owners, and preparing customer responses during due diligence. You’ll collaborate with internal teams and external auditors on SOC 1, SOC 2, ISO 27001 and related certifications.