Remote GRC Analyst: Security & Compliance Lead

Vercel Inc.; United States; Hybrid; USD 134,000 - 202,000; Full time

Benefits offered by this job

Equity

Healthcare package

Mentorship & events

WFH budget

Flexible time off

Job summary

Vercel Inc. is seeking a GRC Analyst to join our Governance, Risk & Compliance team, managing ongoing compliance with ISO 27001, SOC 2, HIPAA, PCI DSS, and related frameworks to ensure ethical and regulatory operations.

You will work with cross-functional teams, streamline audits, and drive remediation. Remote/onsite/hybrid options apply, with anchor days for commuting staff at SF/NY/London/Berlin based on location.

Qualifications

• 3+ years of audit lifecycle support in cloud environments (SOC 2, ISO 27001, PCI, HIPAA).
• Ability to integrate policies and controls into the SDLC with cross-functional teams.
• Strong project management and communication skills across business units.

Responsibilities

• Collaborate with internal teams to maintain an effective suite of internal controls and drive remediation efforts to completion with clear documentation of progress.
• Build strong working relationships across the business so compliance accountability is shared and stakeholders are informed.
• Streamline annual audits by managing audit deliverables, developing treatment plans, and coordinating across teams to document and track completion to ensure audit success.
• Monitor and improve controls, processes, and evidence management practices, identify opportunities to automate and streamline GRC operations, and contribute to controls maturity scoring and reporting.
• Enable go-to-market teams and accelerate deal cycles by supporting security questionnaires, addressing compliance inquiries, and maintaining clear, customer-facing documentation on the company’s security and compliance posture.
• Design and manage company training and enhance visibility on compliance-specific topics for internal stakeholders to ensure an understanding of compliance, ethics, and regulatory requirements within the organization.

Skills

Cloud Security

Audit Lifecycle

Policy & Controls

SDLC Integration

Education

CISM certification

CISSP certification

CCEP certification

Tools

Drata

Linear

Datadog

Job description

Vercel Inc. is seeking a GRC Analyst to join our Governance, Risk & Compliance team, managing ongoing compliance with ISO 27001, SOC 2, HIPAA, PCI DSS, and related frameworks to ensure ethical and regulatory operations.

You will work with cross-functional teams, streamline audits, and drive remediation. Remote/onsite/hybrid options apply, with anchor days for commuting staff at SF/NY/London/Berlin based on location.