GRC Analyst - Risk & Security Controls Leader (Remote)

Jobicy; United States; Remote; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible hours

401K match

Parental leave

Wellness budget

Learning reimbursement

Equity

Job summary

YipitData is seeking a GRC Analyst to lead security, risk, and compliance efforts across the company. You will own GRC workstreams from request to evidence, testing, remediation, and completion, partnering with Security, IT, Legal, Finance, and People.

You will assess risk, test controls, review vendors, and support customer security questionnaires while translating complex requirements into actionable tasks for technical and non-technical teams.

Qualifications

• Experience in security, compliance or risk auditing.
• Hands-on SOC 2 experience including audits, testing and evidence coordination.
• Ability to translate complex requirements into actionable tasks for teams.

Responsibilities

• Take ownership of GRC workstreams from request through evidence collection, testing, remediation and completion.
• Help keep YipitData audit-ready throughout the year.
• Test security controls and verify they’re actually working, not just documented.
• Conduct risk assessments, identify gaps, and help teams create realistic remediation plans.
• Map controls across SOC 2 and other frameworks to satisfy multiple requirements.
• Coordinate recurring work such as access reviews, control testing, policy reviews, risk updates, and audit evidence requests.
• Review vendors and assess whether their security practices meet expectations.
• Support customer security questionnaires with accurate, consistent information.
• Translate compliance requirements into clear actions for non-GRC teams.
• Draft and maintain policies, standards, control narratives and risk records.
• Track findings and remediation, ensuring issues don’t stay open.
• Seek ways to automate repetitive GRC work to scale with the business.
• Contribute to governance for AI and emerging technologies.

Skills

GRC experience

SOC 2 auditing

Risk assessment

Security controls testing

Vendor risk

Policy writing

Job description

YipitData is seeking a GRC Analyst to lead security, risk, and compliance efforts across the company. You will own GRC workstreams from request to evidence, testing, remediation, and completion, partnering with Security, IT, Legal, Finance, and People.

You will assess risk, test controls, review vendors, and support customer security questionnaires while translating complex requirements into actionable tasks for technical and non-technical teams.