Remote GRC Analyst: Security Controls & Risk Champion

Yipitdatajobs; United States; Remote; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible work hours

Flexible vacation

401K match

Parental leave

Wellness budget

Learning reimbursement

Equity

Job summary

YipitData is seeking a GRC Analyst to own and advance the company’s governance, risk, and compliance program across security, IT, engineering, legal, finance, and people teams.

You’ll evaluate controls, drive remediation, and help ensure audit readiness while collaborating with stakeholders. Remote-friendly role within the United States, with NYC as HQ and potential NY tax considerations. East Coast hours commonly observed.

Qualifications

• Experience in security, compliance, risk, audit, privacy, or vendor risk.
• Ability to evaluate evidence and prove controls.
• Strong writing and communicating across technical and non-technical teams.
• Ability to manage multiple workstreams and meet deadlines.

Responsibilities

• Take ownership of GRC workstreams from request through evidence collection, testing, remediation, and completion.
• Test security controls and verify they work, not just exist on paper.
• Conduct risk assessments and develop remediation plans that are realistic and effective.
• Map controls across SOC 2 and other frameworks to satisfy multiple requirements.
• Coordinate recurring work: access reviews, control testing, policy reviews, risk updates, and audit evidence requests.
• Review vendors for security practices against YipitData’s expectations.
• Support customer security questionnaires with accurate, consistent answers.
• Translate compliance requirements into actionable tasks for non-GRC teams.
• Draft and maintain policies, standards, control narratives, risk records, and metrics.
• Track findings and remediation commitments and ensure timely closure.
• Look for ways to automate repetitive GRC work to scale the program.
• Think through governance for AI and emerging technologies.

Skills

GRC experience

Security

Risk management

Audit

Privacy

Vendor risk

Strong writing

Communication skills

Questioning

Job description

YipitData is seeking a GRC Analyst to own and advance the company’s governance, risk, and compliance program across security, IT, engineering, legal, finance, and people teams.

You’ll evaluate controls, drive remediation, and help ensure audit readiness while collaborating with stakeholders. Remote-friendly role within the United States, with NYC as HQ and potential NY tax considerations. East Coast hours commonly observed.