GRC Specialist: AI-Driven Compliance & Vendor Risk

Mixpanel; San Francisco (CA); On-site; USD 116,000 - 140,000; Full time

Benefits offered by this job

Comprehensive Medical, Vision, and 1/3

Generous Vacation Policy & Additional 

Enhanced Parental Leave

Pre-Tax Benefits including 401(K)

Job summary

Mixpanel, Inc. is seeking a GRC Specialist to own day-to-day GRC operations, acting as the first line of response for customer security requests and third-party risk work.

This growth role leads toward GRC Analyst as you build expertise and impact across vendor reviews, risk assessments, and remediation tracking. You will collaborate with engineering and product teams, utilize AI tools to optimize workflows, and help maintain current security content for customers while advancing our risk

Qualifications

• 1-2 years of experience in GRC, security compliance, vendor risk, or a related role.
• Hands-on experience using AI tools to automate repetitive GRC workflows.
• Self-directed, resourceful, and able to progress on incomplete requests with little direction.
• Sound judgment and initiative, including proposing solutions and escalating when needed.
• Understanding of risk management processes across the third-party lifecycle (due diligence, risk assessment, remediation, monitoring).
• Baseline understanding of security systems, access management, logging, encryption, vulnerability mgmt and audit frameworks like SOC 2/ISO 27001.
• Ability to understand customer security requests and respond accurately.
• Ability to translate audit/compliance requirements into clear asks for engineering teams.
• Motivation to learn and grow in the GRC space.

Responsibilities

• Complete customer security questionnaires with cross-functional teams and track progress.
• Support third-party risk management by vendor intake, documentation, and status tracking.
• Serve as first contact for incoming GRC requests and triage across teams.
• Follow up with control owners on remediation items until closure; triage monitoring alerts.
• Flag outdated or inconsistent content and drive corrections to customer-facing docs.
• Leverage AI to streamline repetitive GRC workflows and document improvements.

Skills

GRC experience

AI automation

Cross-team work

Security risk knowledge

Risk management

Written communication

Time zone coordination

Customer security requests

Tools

Vanta

Freshservice

Third-party risk tools

Job description

Mixpanel, Inc. is seeking a GRC Specialist to own day-to-day GRC operations, acting as the first line of response for customer security requests and third-party risk work.

This growth role leads toward GRC Analyst as you build expertise and impact across vendor reviews, risk assessments, and remediation tracking. You will collaborate with engineering and product teams, utilize AI tools to optimize workflows, and help maintain current security content for customers while advancing our risk