GRC (Governance, Risk, and Compliance) Analyst

Ladders; Stati Uniti; Remoto; USD 92.000 - 113.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexible work hours

Generous 401K match

Parental leave

Wellness budget

Learning reimbursement

Equity included

Descrizione del lavoro

Ladders is seeking a GRC Analyst to own governance, risk, and compliance workstreams, ensuring the organization stays audit-ready and improves security posture. You will collaborate with security, legal, and operations to coordinate assessments, validate controls, and drive remediation.

The role emphasizes turning complex requirements into clear guidance for stakeholders. Location is Remote - US-based candidates only, with compensation at $102,500 annually.

Competenze

• 5-7 years of experience in security, compliance, risk, or audit-related fields.
• Hands-on SOC 2 audits including control testing and evidence validation.
• Familiarity with SOC 2 and NIST CSF frameworks.
• Strong writing skills to simplify complex compliance requirements.
• Ability to identify inconsistencies and ask probing questions.
• Experience in vendor risk assessments and security practices evaluation.
• Organizational skills to manage multiple workstreams effectively.

Mansioni

• Take ownership of GRC workstreams from request through completion.
• Ensure the organization remains audit-ready throughout the year.
• Test and validate the effectiveness of security controls.
• Conduct risk assessments and develop remediation plans.
• Map controls across frameworks to streamline compliance efforts.
• Coordinate recurring tasks such as access reviews and policy updates.
• Review vendor security practices to meet company standards.

Conoscenze

Security governance

Risk assessment

SOC 2 audits

Security writing

Vendor risk

Multitasking/organization

Descrizione del lavoro

For our client, we are seeking a GRC (Governance, Risk, and Compliance) Analyst to join the team of a leader in the Information Technology space.

This role will own key governance, risk, and compliance workstreams that keep the organization audit-ready and strengthen its security posture. You will partner closely with security, legal, and operational stakeholders to coordinate assessments, validate controls, and drive practical remediation. The position is well suited for someone who can bring structure to recurring compliance activities while translating complex requirements into clear, actionable guidance.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $102,500 annually

Responsibilities

• Take ownership of GRC workstreams from request through completion
• Ensure the organization remains audit-ready throughout the year
• Test and validate the effectiveness of security controls
• Conduct risk assessments and develop realistic remediation plans
• Map controls across frameworks to streamline compliance efforts
• Coordinate recurring tasks such as access reviews and policy updates
• Review vendor security practices to meet company standards

Qualifications

• 5-7 years of experience in security, compliance, risk, or audit-related fields
• Hands-on experience with SOC 2 audits, including control testing and evidence validation
• Familiarity with security frameworks such as SOC 2 and NIST CSF
• Strong writing skills to simplify complex compliance requirements
• Ability to identify inconsistencies and ask probing questions
• Experience in vendor risk assessments and security practices evaluation
• Organizational skills to manage multiple workstreams effectively

Benefits

• Flexible work hours and vacation policies
• Generous 401K match and parental leave
• Wellness budget and learning reimbursement
• Equity included in the compensation package
• Opportunities for personal growth and skill mastery

Our client is an equal opportunity employer.