Remote GRC Analyst - Compliance & Audit Strategist

Neura Market; Northern (KY); Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Equity

Healthcare package

Mentorship & events

Flexible time off

WFH budget

Job summary

Vercel is seeking a GRC Analyst to join the Governance, Risk & Compliance team. You will manage ongoing compliance across security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS) and collaborate with cross‑functional teams to promote accountability and ethical practices.

You will report to the Head of GRC and may work remote, onsite, or hybrid. This role emphasizes remediation, audits, and documentation to support a strong compliance posture across the organization.

Qualifications

• 3+ years supporting audit lifecycle in cloud environments (SOC 2, ISO 27001, PCI, HIPAA).
• Ability to integrate policies and controls into the SDLC with internal partners.
• Strong project management, ownership, and cross‑functional communication.

Responsibilities

• Collaborate with internal teams to maintain controls and remediation progress.
• Build cross‑functional relationships to share compliance accountability.
• Streamline audits by managing deliverables and documenting progress.
• Monitor controls, improve evidence management, and automate where possible.
• Support GTM teams with security questionnaires and customer docs.
• Design and manage company training on compliance topics.

Skills

Audit lifecycle

Cloud security

Policy integration (SDLC)

Project management

Cross-functional collaboration

Tools

Drata

Linear

Datadog

Job description

Vercel is seeking a GRC Analyst to join the Governance, Risk & Compliance team. You will manage ongoing compliance across security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS) and collaborate with cross‑functional teams to promote accountability and ethical practices.

You will report to the Head of GRC and may work remote, onsite, or hybrid. This role emphasizes remediation, audits, and documentation to support a strong compliance posture across the organization.