Remote GRC Analyst: Risk, Controls & Compliance

YipitData; Northern (KY); Hybrid; USD 92,000 - 113,000; Full time

Job summary

YipitData is seeking a GRC Analyst to drive governance, risk, and compliance across security, IT, engineering, legal, finance, and people teams. You will transform complex requirements into practical actions, test controls, and lead remediation to keep the program audit-ready.

You will map controls to SOC 2 and other frameworks, coordinate recurring reviews, and work with vendors and customers to provide accurate, consistent information.

Qualifications

• Hands-on SOC 2 experience, including supporting Type I or Type II audits.
• Experience in security, compliance, risk, or a related field that teaches you how to assess whether requirements are met.
• Strong writing skills to convey complex security requirements clearly.
• Ability to translate policy/framework needs into concrete actions for teams.
• Excellent organization and attention to detail to drive follow-through.

Responsibilities

• Take ownership of GRC workstreams from first request through evidence collection, testing, remediation and completion.
• Help keep YipitData audit-ready throughout the year.
• Test security controls and validate that they actually work, not just documentation exists.
• Conduct risk assessments and develop realistic remediation plans with teams.
• Map controls to SOC 2 and other frameworks to maximize coverage and efficiency.
• Coordinate recurring tasks such as access reviews, control testing, policy reviews, risk updates and audit evidence requests.
• Review vendors to ensure security practices meet YipitData’s standards.
• Support customer security questionnaires with accurate, consistent information.
• Translate compliance requirements into actionable tasks for non-GRC teams.
• Draft and maintain policies, standards, risk records and program documentation.
• Track findings and ensure remediation commitments are closed in a timely manner.
• Identify opportunities to automate repetitive GRC work to scale the program.

Skills

SOC 2 experience

Security risk assessments

Audit

Policy writing

Clear written communication

Tools

Audit platform

Job description

YipitData is seeking a GRC Analyst to drive governance, risk, and compliance across security, IT, engineering, legal, finance, and people teams. You will transform complex requirements into practical actions, test controls, and lead remediation to keep the program audit-ready.

You will map controls to SOC 2 and other frameworks, coordinate recurring reviews, and work with vendors and customers to provide accurate, consistent information.