Remote GRC Analyst - Compliance, Audits & Security

Mosaec; Northern (KY); Hybrid; USD 134,000 - 202,000; Full time

Job summary

Vercel is seeking a GRC Analyst to join our Governance, Risk & Compliance (GRC) team. You will manage ongoing compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS) and collaborate with cross-functional teams to uphold ethical and regulatory standards.

You will report to the Head of GRC and may work in a remote, onsite, or hybrid setup. Location-based anchor days may apply for offices in SF, NY, London, or Berlin.

Qualifications

• 3+ years in supporting the audit lifecycle in cloud-centric environments (SOC 2, ISO 27001, PCI, HIPAA).
• Experience integrating policies and controls into SDLC across teams.
• Strong project management and cross-functional collaboration.

Responsibilities

• Collaborate with internal teams to maintain controls and remediation progress.
• Build relationships across business units to ensure accountability.
• Manage annual audits and document progress for audit success.
• Monitor and improve controls, identify automation opportunities, and support maturity scoring.
• Support security questionnaires and customer-facing compliance documentation.
• Design and manage company training on compliance topics.

Skills

Audit lifecycle management

Policy & controls integration

Project management

Tools

Drata

Linear

Datadog

Job description

Vercel is seeking a GRC Analyst to join our Governance, Risk & Compliance (GRC) team. You will manage ongoing compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS) and collaborate with cross-functional teams to uphold ethical and regulatory standards.

You will report to the Head of GRC and may work in a remote, onsite, or hybrid setup. Location-based anchor days may apply for offices in SF, NY, London, or Berlin.