Hybrid GRC Analyst — Lead SOX/SOC 2, PCI, NIST

Squarespace; New York (NY); Hybrid; USD 108,000 - 125,000; Full time

Benefits offered by this job

Medical plans

Fertility benefits

Adoption benefits

Headspace app

Global EAP

Retirement match

Parental leave

Commuter benefits

Education reimbursement

Stock option eligibility

Dog-friendly workplace

Job summary

Squarespace is seeking a GRC Analyst to join the Security organization and advance governance, risk, and compliance programs. You will work with Engineering, Legal, Finance, Product, and auditors to maintain audit readiness and automate GRC workflows in a hybrid NYC role.

You will report to the GRC Manager and contribute to SOX, SOC, PCI, and privacy programs, helping protect Squarespace and its customers. This is a data-driven, collaborative position with a focus on continuous improvement.

Qualifications

• 3+ years in GRC, IT audit, security/compliance, or privacy compliance, with end-to-end audit activity experience.
• Experience leading or supporting complex compliance programs across SOX, SOC 1/2, PCI, NIST, ISO.
• Ability translate IT control requirements into actionable expectations for technical and non-technical teams.
• Experience supporting vendor risk programs and third-party assessments.
• Working knowledge of SaaS and cloud environments.
• Experience using GRC or workflow platforms to maintain records and drive processes.

Responsibilities

• Lead and support audits across SOX, SOC, PCI, and NIST from scoping through reporting.
• Evaluate control design and operating effectiveness and track remediation to closure.
• Conduct vendor security and privacy reviews and assess third-party control maturity.
• Coordinate timely, accurate responses to customer security questionnaires and partner assessments.
• Support data privacy audits and assessments including GDPR, CCPA/CPRA, data retention and access rights.
• Improve GRC operations through automation and continuous monitoring.

Skills

GRC program management

SOX / SOC / PCI / NIST

IT controls evaluation

Vendor risk management

GRC platforms

SaaS / cloud experience

Job description

Squarespace is seeking a GRC Analyst to join the Security organization and advance governance, risk, and compliance programs. You will work with Engineering, Legal, Finance, Product, and auditors to maintain audit readiness and automate GRC workflows in a hybrid NYC role.

You will report to the GRC Manager and contribute to SOX, SOC, PCI, and privacy programs, helping protect Squarespace and its customers. This is a data-driven, collaborative position with a focus on continuous improvement.