Remote GRC Analyst: Cloud Security & Compliance Lead

vercel.com; Austin (NY); Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Equity

Healthcare

Mentorship

Flexible time off

WFH budget

Job summary

Vercel is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks, reporting to the Head of GRC.

The role involves cross-functional collaboration to ensure ethical and regulatory adherence across the organization. If you’re within commuting distance to our offices or prefer remote/hybrid work, you’ll participate in audits, drive remediation, and strengthen our control environment while advancing our security

Qualifications

• At least 3 years of relevant experience in supporting the audit lifecycle in a cloud-centric environment.
• Experience collaborating with internal partners to incorporate policies and controls into SDLC.
• Strong project management with proactive ownership across business units.

Responsibilities

• Collaborate with internal teams to maintain an effective suite of internal controls and remediation plans.
• Build cross-functional relationships to promote compliance accountability.
• Streamline annual audits by managing deliverables and documenting progress.
• Monitor controls and evidence management, identify automation opportunities.
• Support security questionnaires and maintain customer-facing compliance documentation.
• Design and manage training to raise awareness of compliance and ethics.

Skills

Audit lifecycle

Cloud experience

Policy integration

Job description

Vercel is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks, reporting to the Head of GRC.

The role involves cross-functional collaboration to ensure ethical and regulatory adherence across the organization. If you’re within commuting distance to our offices or prefer remote/hybrid work, you’ll participate in audits, drive remediation, and strengthen our control environment while advancing our security