Remote GRC Analyst — Risk, Controls & Compliance

YipitData (Alternative); United States; Remote; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible hours

401K match

Parental leave

Wellness budget

Job summary

YipitData is seeking a GRC Analyst to own governance, risk, and compliance across audits, controls, and vendor assessments. This remote-friendly role sits in the US with East Coast hours; you will partner with Security, Legal, IT, and Finance to ensure audit readiness and continuous improvement.

You will translate complex requirements into actionable work, map controls to SOC 2 and other frameworks, and help scale the GRC program as AI and new technologies evolve.

Qualifications

• Hands-on SOC 2 experience with Type I/II audits.
• Experience testing controls and validating evidence.
• Ability to coordinate with auditors and remediation tracking.
• Experience with risk assessments and remediation planning.
• Strong written and verbal communication across teams.

Responsibilities

• Lead GRC workstreams from request to evidence collection and remediation.
• Test security controls to verify actual effectiveness.
• Conduct risk assessments and define remediation plans.
• Review vendors for security posture and practices.
• Support customer security questionnaires with accurate data.
• Translate requirements into actionable tasks for teams.
• Draft and maintain policies, standards, and risk records.
• Track findings and close out audit actions.

Skills

SOC 2 audits

Security experience

Risk assessment

Policy writing

Vendor risk

Audit coordination

Job description

YipitData is seeking a GRC Analyst to own governance, risk, and compliance across audits, controls, and vendor assessments. This remote-friendly role sits in the US with East Coast hours; you will partner with Security, Legal, IT, and Finance to ensure audit readiness and continuous improvement.

You will translate complex requirements into actionable work, map controls to SOC 2 and other frameworks, and help scale the GRC program as AI and new technologies evolve.