GRC & Compliance Strategist for Cloud Security & Audits

Vercel Inc.; United States; Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Equity

Healthcare package

Mentorship & events

Flexible time off

WFH budget

Job summary

Vercel Inc. is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks, including ISO 27001, SOC 2, HIPAA, and PCI DSS, and collaborate across teams to promote accountability and integrity.

You will report to the Head of GRC and work in a flexible location (remote/onsite/hybrid) setup. The role focuses on maintaining controls, supporting audits, and enabling secure, compliant business operations.

Qualifications

• 3+ years in supporting the audit lifecycle in a cloud environment.
• Experience integrating policies and controls into the SDLC.
• Strong project management and cross-functional collaboration.

Responsibilities

• Maintain an effective suite of internal controls and drive remediation with clear documentation.
• Build cross-functional relationships to share compliance accountability.
• Streamline audits by managing deliverables and remediation plans.
• Monitor controls and automate GRC processes and contribute to maturity scoring.
• Support security questionnaires and maintain customer-facing compliance documentation.
• Design and manage training on compliance topics for internal stakeholders.

Skills

Audit lifecycle

Cloud governance

Project management

Stakeholder collaboration

Communication

Tools

Drata

Linear

Datadog

Cloud tooling

Job description

Vercel Inc. is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks, including ISO 27001, SOC 2, HIPAA, and PCI DSS, and collaborate across teams to promote accountability and integrity.

You will report to the Head of GRC and work in a flexible location (remote/onsite/hybrid) setup. The role focuses on maintaining controls, supporting audits, and enabling secure, compliant business operations.