GRC Analyst - Transforming Controls, Risks & Compliance

YipitData; United States; On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Flexible hours

Flexible vacation

401K match

Parental leave

Team events

Wellness budget

Learning reimbursement

Job summary

YipitData seeks a GRC Analyst to drive governance, risk, and compliance work across security, IT, and product teams. You will transform complex requirements into executable actions, support SOC 2 audits, and ensure evidence is thorough and traceable.

The role emphasizes ownership, clear communication with technical and non-technical stakeholders, and ongoing remediation tracking to keep audits ready year-round. Experience in security, risk, and vendor management is valued.

Qualifications

• Hands-on SOC 2 experience, including supporting Type I or Type II audits.
• Familiar with SOC 2, NIST CSF, or similar security frameworks.
• Ability to translate compliance requirements into clear actions for non-GRC teams.
• Strong writing skills to clarify complex requirements.
• Ownership mindset and ability to manage multiple workstreams.
• Experience in security, compliance, risk, audit, privacy, or vendor risk.

Responsibilities

• Support audits, risk assessments, control testing, vendor reviews, and policy reviews.
• Partner with Security, IT, Engineering, Legal, Finance, and People to understand business operations.
• Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion.
• Review vendors and assess their security practices against YipitData’s expectations.
• Translate compliance requirements into actionable tasks for teams outside GRC.
• Draft and maintain policies, standards, control narratives, and risk records.
• Track findings and remediation, ensuring timely closure and evidence quality.
• Identify opportunities to automate repetitive GRC work and scale the program.
• Contribute to governance discussions for AI and emerging technologies.

Skills

SOC 2 experience

NIST CSF familiarity

Security audits support

Evidence validation

Cross-functional communication

Ownership & independence

Remediation tracking

Policy drafting

Job description

YipitData seeks a GRC Analyst to drive governance, risk, and compliance work across security, IT, and product teams. You will transform complex requirements into executable actions, support SOC 2 audits, and ensure evidence is thorough and traceable.

The role emphasizes ownership, clear communication with technical and non-technical stakeholders, and ongoing remediation tracking to keep audits ready year-round. Experience in security, risk, and vendor management is valued.