GRC Analyst — Remote/Hybrid, Cloud Security & Compliance

Vercel; New York (NY); Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Competitive compensation

Inclusive Healthcare Package

Mentorship & events

Flexible Time Off

WFH gear budget

Job summary

Vercel is seeking a GRC Analyst to join the Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks across ISO 27001, SOC 2, HIPAA, PCI DSS and more, reporting to Head of GRC. Hybrid work option with in-office anchor days when near SF, NY, London or Berlin.

You will collaborate across teams to maintain controls, drive remediation, and streamline audits, while promoting accountability and regulatory adherence in a fast-growing environment.

Qualifications

• 3+ years supporting the audit lifecycle in a cloud-centric environment.
• Experience aligning policies and controls to SDLC and cross-functional teams.
• Ability to manage multiple audits and regulatory inquiries with strong documentation.

Responsibilities

• Collaborate with internal teams to maintain internal controls and remediation progress.
• Coordinate audits, develop treatment plans, and document progress for audits.
• Support security questionnaires and maintain customer-facing compliance documentation.
• Design and deliver compliance training to raise awareness across the organization.

Skills

SOC 2

ISO 27001

PCI DSS

HIPAA

Cloud controls

Tools

Drata

Linear

Datadog

Job description

Vercel is seeking a GRC Analyst to join the Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks across ISO 27001, SOC 2, HIPAA, PCI DSS and more, reporting to Head of GRC. Hybrid work option with in-office anchor days when near SF, NY, London or Berlin.

You will collaborate across teams to maintain controls, drive remediation, and streamline audits, while promoting accountability and regulatory adherence in a fast-growing environment.