Junior GRC Analyst: AI-Driven Security & Compliance

Commerce.com US, Inc.; United States; Remoto; USD 50.000 - 73.000; Tempo pieno

Descrizione del lavoro

Commerce.com US, Inc. seeks a GRC Analyst to join our Governance, Risk & Compliance team. You’ll support day-to-day risk and compliance operations, review vendor materials, and assist with audits across SOC 2, ISO 27001, and PCI-DSS.

You’ll maintain evidence, track controls, and collaborate with cross-functional teams. Ideal candidates are detail-oriented, proactive, and eager to learn in a globally distributed environment.

Competenze

• 0–2 years in GRC, risk operations, compliance (internships count).
• Bachelor's degree in CS, Cybersecurity, or Info Systems; equivalent work experience considered.
• Interest in GRC engineering and ability to learn quickly in a fast-paced environment.

Mansioni

• Support third-party risk assessments by reviewing vendor security questionnaires, documentation, and due diligence materials.
• Maintain and update the vendor risk register and track remediation activities to closure.
• Assist with internal control testing and evidence collection for SOC 2, ISO 27001, PCI-DSS, etc.
• Help coordinate audit requests and liaise with internal stakeholders to gather required documentation.
• Monitor policy and procedure documentation, flagging items due for review or update.
• Assist in tracking risk exceptions, escalating items that require senior review.
• Support reporting and metrics preparation for leadership and committee-level reviews.
• Contribute to process improvement initiatives as the program scales.

Conoscenze

GRC

Risk operations

Compliance

AI coding tools

Formazione

Bachelor's degree in Computer Science/Cybersecurity/Information Systems

Strumenti

Claude Code

Microsoft Office

Google Workspace

Descrizione del lavoro

Commerce.com US, Inc. seeks a GRC Analyst to join our Governance, Risk & Compliance team. You’ll support day-to-day risk and compliance operations, review vendor materials, and assist with audits across SOC 2, ISO 27001, and PCI-DSS.

You’ll maintain evidence, track controls, and collaborate with cross-functional teams. Ideal candidates are detail-oriented, proactive, and eager to learn in a globally distributed environment.