GRC Analyst - Remote, Compliance & Risk Champion

Vercel; San Francisco (CA); Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Competitive compensation

Healthcare

Mentorship & events

Flexible PTO

WFH budget

Job summary

Vercel is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage and maintain ongoing compliance with security and privacy frameworks including ISO 27001, SOC 2, HIPAA, and PCI DSS, collaborating with cross-functional teams to promote accountability and integrity.

You will report to the Head of GRC and participate in audit workflows, controls improvement, and security questionnaires, with in-office anchor days for SF/NY/London/Berlin when applicable.

Qualifications

• At least 3 years of experience supporting the audit lifecycle in a cloud-centric environment.
• Experience collaborating with internal partners to embed policies and controls into SDLC.
• Strong project management skills with ability to drive tasks across teams.

Responsibilities

• Collaborate with internal teams to maintain internal controls and drive remediation with clear progress documentation.
• Build cross-functional relationships to ensure compliance accountability and stakeholder communication.
• Manage audit deliverables, develop treatment plans, and coordinate across teams for timely audits.
• Monitor and improve controls, evidence management, and reporting; identify automation opportunities.
• Support security questionnaires and customer inquiries; maintain clear security/compliance docs for customers.
• Design and manage company training on compliance topics and foster understanding of regulatory requirements.

Skills

Audit lifecycle

Cloud governance

Project management

Education

CISM

CISSP

CCEP

Tools

Drata

Linear

Datadog

Job description

Vercel is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage and maintain ongoing compliance with security and privacy frameworks including ISO 27001, SOC 2, HIPAA, and PCI DSS, collaborating with cross-functional teams to promote accountability and integrity.

You will report to the Head of GRC and participate in audit workflows, controls improvement, and security questionnaires, with in-office anchor days for SF/NY/London/Berlin when applicable.