GRC (Governance, Risk, and Compliance) Analyst

Ladders; United States; On-site; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible work hours and vacation

Generous 401K match and parental leave

Wellness budget and learning reimburse

High-impact work environment

Job summary

Ladders is seeking a GRC Analyst to join a leader in information technology. This role owns governance, risk, and compliance workstreams to keep the organization audit-ready and aligned with security standards.

You will partner with security, operations, and cross-functional teams to translate requirements into practical actions that strengthen controls and manage risk. The position is remote for US-based candidates, with no visa sponsorship.

Qualifications

• 5–7 years of experience in security, compliance, risk, or audit.
• Hands-on SOC 2 experience, including audit support and control testing.
• Familiarity with SOC 2, NIST CSF, and similar frameworks.
• Strong writing skills to simplify complex requirements.
• Ability to manage multiple workstreams and meet deadlines.

Responsibilities

• Own GRC workstreams from request to completion.
• Ensure the organization remains audit-ready year-round.
• Test security controls for effectiveness beyond documentation.
• Conduct risk assessments and develop practical remediation plans.
• Organize recurring tasks such as access reviews and control testing.
• Evaluate vendor security practices against company standards.
• Translate compliance requirements into actionable tasks for teams.

Skills

GRC experience

Security controls testing

Risk assessment

Audit readiness

Stakeholder communication

Job description

For our client, we are seeking a GRC (Governance, Risk, and Compliance) Analyst to join the team of a leader in the Information Technology space.

This role will own governance, risk, and compliance workstreams that keep the organization prepared for audits and aligned with security standards. You will partner closely with security, operations, and cross-functional stakeholders to translate requirements into practical actions that support control effectiveness and sound risk management. The position is hands-on, with a focus on maintaining audit readiness, testing controls, and improving compliance processes across the business.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $102,500+ annually

Responsibilities

• Own GRC workstreams from request to completion
• Ensure the organization remains audit-ready year-round
• Test security controls for effectiveness beyond documentation
• Conduct risk assessments and develop practical remediation plans
• Organize recurring tasks such as access reviews and control testing
• Evaluate vendor security practices against company standards
• Translate compliance requirements into actionable tasks for teams

Qualifications

• 5-7 years of experience in security, compliance, risk, or audit
• Hands-on SOC 2 experience, including audit support and control testing
• Familiarity with SOC 2, NIST CSF, and similar frameworks
• Strong writing skills to simplify complex requirements
• Ability to manage multiple workstreams and meet deadlines

Benefits

• Flexible work hours and vacation
• Generous 401K match and parental leave
• Wellness budget and learning reimbursement
• High-impact work environment focused on personal growth and ownership

Our client is an equal opportunity employer. We encourage you to apply even if you don't meet every qualification-your background could be exactly what this team needs.