Remote GRC Analyst — Security & Compliance

Webhosting; San Francisco, New York (CA, NY); Hybrid; USD 134,000 - 202,000; Full time

Job summary

Vercel in San Francisco is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage and maintain ongoing compliance with security and privacy frameworks, policies, and audits including ISO 27001, SOC 2, HIPAA, and PCI DSS.

You will collaborate with cross-functional teams to promote accountability, report to the Head of GRC, and participate in audits and training. Location can be remote, onsite, or hybrid, with in-office anchor days for certain offices.

Responsibilities

• Collaborate with internal teams to maintain an effective suite of internal controls and drive remediation efforts with clear progress documentation.
• Build strong working relationships across the business so compliance accountability is shared and stakeholders are informed.
• Streamline annual audits by managing deliverables, developing treatment plans, and coordinating across teams to document and track completion.
• Monitor and improve controls, processes, and evidence management practices, identifying opportunities to automate and streamline GRC operations.
• Enable go-to-market teams and accelerate deal cycles by supporting security questionnaires and maintaining clear, customer-facing documentation on Vercel’s security posture.
• Design and manage company training and enhance visibility on compliance topics for internal stakeholders to ensure understanding of regulatory requirements.

Job description

Vercel in San Francisco is seeking a GRC Analyst to join our Governance, Risk & Compliance team. You will manage and maintain ongoing compliance with security and privacy frameworks, policies, and audits including ISO 27001, SOC 2, HIPAA, and PCI DSS.

You will collaborate with cross-functional teams to promote accountability, report to the Head of GRC, and participate in audits and training. Location can be remote, onsite, or hybrid, with in-office anchor days for certain offices.