Remote GRC Analyst: Lead Audit-Ready Security & Compliance

Ladders; United States; Remote; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible work hours

Generous 401K match

Parental leave

Wellness budget

Learning reimbursement

Equity included

Job summary

Ladders is seeking a GRC Analyst to own governance, risk, and compliance workstreams, ensuring the organization stays audit-ready and improves security posture. You will collaborate with security, legal, and operations to coordinate assessments, validate controls, and drive remediation.

The role emphasizes turning complex requirements into clear guidance for stakeholders. Location is Remote - US-based candidates only, with compensation at $102,500 annually.

Qualifications

• 5-7 years of experience in security, compliance, risk, or audit-related fields.
• Hands-on SOC 2 audits including control testing and evidence validation.
• Familiarity with SOC 2 and NIST CSF frameworks.
• Strong writing skills to simplify complex compliance requirements.
• Ability to identify inconsistencies and ask probing questions.
• Experience in vendor risk assessments and security practices evaluation.
• Organizational skills to manage multiple workstreams effectively.

Responsibilities

• Take ownership of GRC workstreams from request through completion.
• Ensure the organization remains audit-ready throughout the year.
• Test and validate the effectiveness of security controls.
• Conduct risk assessments and develop remediation plans.
• Map controls across frameworks to streamline compliance efforts.
• Coordinate recurring tasks such as access reviews and policy updates.
• Review vendor security practices to meet company standards.

Skills

Security governance

Risk assessment

SOC 2 audits

Security writing

Vendor risk

Multitasking/organization

Job description

Ladders is seeking a GRC Analyst to own governance, risk, and compliance workstreams, ensuring the organization stays audit-ready and improves security posture. You will collaborate with security, legal, and operations to coordinate assessments, validate controls, and drive remediation.

The role emphasizes turning complex requirements into clear guidance for stakeholders. Location is Remote - US-based candidates only, with compensation at $102,500 annually.