GRC Analyst: Risk, Audit & BC/DR (Hybrid MA)

Kayak; United States; Hybrid; USD 85,000 - 95,000; Full time

Benefits offered by this job

Hybrid work flexibility

Mental health focus

Parental leave

Generous vacation

Volunteer time

Development dollars

Travel discounts

Employee Resource Groups

Health plans

Free lunch

Job summary

KAYAK, part of Booking Holdings, is hiring an Associate GRC Analyst to join our Cyber Governance, Risk, and Compliance team in Massachusetts. This early‑career role focuses on risk assessments, policy management, control monitoring, and BC/DR efforts while helping modernize our GRC program.

You will collaborate with engineering and business teams, support audits, and explore automation through scripts and integrations. A bachelor’s degree and curiosity are encouraged.

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• Foundational understanding of GRC concepts including risk management, controls, compliance frameworks, and audits.
• Familiarity with Business Continuity and Disaster Recovery principles (BIAs, RTOs, RPOs).
• Experience in a GRC, cybersecurity, internal audit, IT risk, or business continuity context.

Responsibilities

• Support risk assessments by identifying, documenting, and tracking risks across business and technology areas.
• Maintain policies, standards, and procedures aligned with security frameworks.
• Coordinate audits by gathering evidence and tracking remediation.
• Assist with control testing and monitoring to verify effectiveness.
• Maintain the risk register and risk treatment tracking.
• Assist with security questionnaires and due diligence documentation.
• Support BC/DR plans, BIAs, and recovery strategies.
• Collaborate with engineering and business to gather evidence and communicate obligations.
• Help automate GRC processes using scripts, APIs, or integrations.
• Stay current on regulatory changes and evolving governance approaches.

Skills

GRC concepts

Risk assessments

Policy management

Control monitoring

Audits

BC/DR

Communication

Education

Bachelor's degree

Tools

Drata

RiskConnect

Job description

KAYAK, part of Booking Holdings, is hiring an Associate GRC Analyst to join our Cyber Governance, Risk, and Compliance team in Massachusetts. This early‑career role focuses on risk assessments, policy management, control monitoring, and BC/DR efforts while helping modernize our GRC program.

You will collaborate with engineering and business teams, support audits, and explore automation through scripts and integrations. A bachelor’s degree and curiosity are encouraged.