Remote GRC Analyst: Drive Compliance & Risk

YipitData (Alternative); United States; Remote; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible work hours

Flexible vacation

401K match

Parental leave

Team events

Wellness budget

Learning reimbursement

Equity

Job summary

YipitData is seeking a GRC Analyst to own governance, risk, and compliance across the organization. This remote-friendly role collaborates with Security, IT, Legal, and Finance to test controls, run risk assessments, and manage audits.

You’ll translate complex requirements into actionable work, map controls to SOC 2 and other frameworks, and help scale the program as products and AI evolve. US-based remote options with optional NYC HQ; East Coast hours are common, and compensation is competitive

Responsibilities

• Take ownership of GRC workstreams and drive them from the initial request through evidence collection, testing, remediation, and completion
• Help keep YipitData audit-ready throughout the year
• Test security controls and determine whether they are actually working, rather than simply confirming that a document exists
• Conduct risk assessments, identify meaningful gaps, and help teams develop remediation plans that are realistic and effective
• Map controls across SOC 2 and other frameworks so one strong control can satisfy multiple requirements
• Coordinate recurring work such as access reviews, control testing, policy reviews, risk updates, and audit evidence requests
• Review vendors and help determine whether their security practices meet YipitData’s expectations
• Support customer security questionnaires by finding the right information, validating it, and making sure our answers are accurate and consistent
• Translate compliance requirements into clear actions for teams that do not live and breathe GRC
• Draft and maintain policies, standards, control narratives, risk records, metrics, and other program documentation
• Track findings and remediation commitments, follow up with owners, and keep issues from quietly sitting open forever
• Look for ways to simplify and automate repetitive GRC work so the program can scale with the business
• Help us think through governance for emerging technologies, including AI products, agents, and new ways of handling data

Job description

YipitData is seeking a GRC Analyst to own governance, risk, and compliance across the organization. This remote-friendly role collaborates with Security, IT, Legal, and Finance to test controls, run risk assessments, and manage audits.

You’ll translate complex requirements into actionable work, map controls to SOC 2 and other frameworks, and help scale the program as products and AI evolve. US-based remote options with optional NYC HQ; East Coast hours are common, and compensation is competitive