Remote GRC Analyst: Risk, Compliance & Controls

First Roles; United States; Remote; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible work hours

Flexible vacation

401K match

Parental leave

Wellness budget

Learning reimbursement

Equity

Job summary

YipitData is seeking a GRC Analyst to own governance, risk, and compliance workstreams across audits, policies, and vendor reviews. The role focuses on testing controls, identifying gaps, and coordinating remediation with Security, IT, Engineering, Legal, Finance, and People teams.

You will drive evidence-based assessments, translate requirements for teams, and help scale the program as AI and new technologies expand. Flexible, remote-friendly within the US.

Qualifications

• Hands-on SOC 2 experience including audits, testing controls, coordinating with auditors.
• Experience in security, compliance, risk, audit, privacy, or vendor risk.
• Strong writing skills to articulate requirements clearly.

Responsibilities

• Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion.
• Help keep audit readiness throughout the year.
• Test security controls for actual effectiveness rather than document existence.
• Conduct risk assessments and develop realistic remediation plans.
• Map controls across SOC 2 and other frameworks to satisfy multiple requirements.
• Coordinate recurring GRC tasks like access reviews, policy reviews, and evidence requests.
• Review vendors for security practices and alignment with expectations.
• Support customer security questionnaires with accurate, consistent responses.
• Translate compliance requirements into actionable steps for non-GRC teams.
• Draft and maintain policies, standards, and risk records.
• Track findings and ensure timely remediation.
• Automate repetitive GRC tasks to scale the program.

Skills

SOC 2 experience

Security frameworks

Risk assessment

Audit coordination

Vendor risk management

Policy writing

Communication

AI governance

Job description

YipitData is seeking a GRC Analyst to own governance, risk, and compliance workstreams across audits, policies, and vendor reviews. The role focuses on testing controls, identifying gaps, and coordinating remediation with Security, IT, Engineering, Legal, Finance, and People teams.

You will drive evidence-based assessments, translate requirements for teams, and help scale the program as AI and new technologies expand. Flexible, remote-friendly within the US.