GRC Lead: Risk & Compliance for Tech Platforms

Averity; New York (NY); On-site; USD 90,000 - 140,000; Full time

Job summary

Averity is seeking a Senior Governance, Risk & Compliance Analyst to strengthen its security and compliance program. This hands-on role focuses on keeping the organization audit-ready, evaluating third-party risk, and turning security requirements into practical processes that teams will follow.

You will conduct risk assessments, identify gaps, collect evidence for PCI DSS and privacy, document controls, and support audits.

Qualifications

• Experience in GRC, IT audit or security compliance.
• Working knowledge of PCI DSS, NIST, SOC 2, or ISO 27001.
• Experience with a GRC platform like Hyperproof, Archer, or OneTrust.

Responsibilities

• Conduct risk assessments of vendors, platforms, and AI tools.
• Identify security/compliance gaps and track remediation through completion.
• Collect and maintain evidence for PCI DSS and privacy requirements.
• Document security controls and monitor their effectiveness.
• Support internal and external audits.
• Update security policies, standards, and baselines.
• Maintain the organizational risk register.
• Support quarterly risk reporting.
• Partner with IT, Engineering, Legal, and other control owners.

Skills

GRC

IT audit

Security compliance

Documentation/communication

Risk management

Collaboration

Tools

Hyperproof

Archer

OneTrust

Job description

Averity is seeking a Senior Governance, Risk & Compliance Analyst to strengthen its security and compliance program. This hands-on role focuses on keeping the organization audit-ready, evaluating third-party risk, and turning security requirements into practical processes that teams will follow.

You will conduct risk assessments, identify gaps, collect evidence for PCI DSS and privacy, document controls, and support audits.