Remote GRC Analyst: Security & Compliance Lead

Visa Hunt; San Francisco, New York (CA, NY); Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Competitive compensation including"

Inclusive Healthcare Package

Learn and Grow - mentorship & events

Flexible Time Off

WFH budget for space setup

Job summary

Vercel in San Francisco is seeking a GRC Analyst to join the Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS) and collaborate across the organization to uphold ethical practices.

This role reports to the Head of GRC and supports internal controls, audits, training, and customer-facing documentation on security posture.

Qualifications

• 3+ years supporting audits in a cloud environment (SOC 2, ISO 27001, PCI, HIPAA).
• Experience translating policies into technical controls within SDLC.
• Strong project management and cross-functional collaboration.

Responsibilities

• Collaborate with internal teams to maintain an effective suite of internal controls and driving remediation efforts to completion with clear documentation of progress.
• Build strong working relationships across the business so compliance accountability is shared and stakeholders are informed.
• Streamline annual audits by managing audit deliverables, developing treatment plans, and coordinating across teams to document and track completion to ensure audit success.
• Monitor and improve controls, processes, and evidence management practices, identify opportunities to automate and streamline GRC operations, and contribute to controls maturity scoring and reporting
• Enable go-to-market teams and accelerate deal cycles by supporting security questionnaires, addressing compliance inquiries, and maintaining clear, customer-facing documentation on Vercel’s security and compliance posture.
• Design and manage company training and enhance visibility on compliance-specific topics for internal stakeholders to ensure an understanding of compliance, ethics, and regulatory requirements within the organization.

Skills

GRC Analysis

Policy & controls

Audit lifecycle

Cloud security

Tools

Drata

Linear

Datadog

Job description

Vercel in San Francisco is seeking a GRC Analyst to join the Governance, Risk & Compliance team. You will manage ongoing compliance with security and privacy frameworks (ISO 27001, SOC 2, HIPAA, PCI DSS) and collaborate across the organization to uphold ethical practices.

This role reports to the Head of GRC and supports internal controls, audits, training, and customer-facing documentation on security posture.