Remote GRC Analyst: Security, Risk & Compliance

YipitData; United States; Remote; USD 92,000 - 113,000; Full time

Benefits offered by this job

Flexible work hours

Generous 401K match

Equity

Job summary

YipitData in the United States is seeking a GRC Analyst to lead governance, risk, and compliance initiatives. You will assess controls, coordinate audits, and partner with security, IT, legal, and finance to drive remediation and evidence collection.

You will translate complex regulatory requirements into actionable tasks for technical and non-technical teams, ensure ongoing audit readiness, and help scale the program as our products and AI use evolve.

Qualifications

• Experience with SOC 2 and other security frameworks.
• Ability to map controls to multiple requirements.
• Strong written communication for policy narratives.
• Hands-on audit support and remediation tracking.

Responsibilities

• Take ownership of GRC workstreams and drive them from the initial request through evidence collection, testing, remediation, and completion.
• Help keep YipitData audit-ready throughout the year.
• Test security controls and verify they are actually working, not just that a document exists.
• Conduct risk assessments, identify gaps, and help teams develop remediation plans that are realistic and effective.
• Map controls across SOC 2 and other frameworks so one strong control can satisfy multiple requirements.
• Coordinate recurring work such as access reviews, control testing, policy reviews, risk updates, and audit evidence requests.
• Review vendors and assess whether their security practices meet YipitData’s expectations.
• Support customer security questionnaires by finding the right information, validating it, and ensuring consistency.
• Translate compliance requirements into clear actions for teams not specialized in GRC.
• Draft and maintain policies, standards, control narratives, risk records, metrics, and other program documentation.
• Track findings and remediation commitments, follow up with owners, and prevent open issues.
• Look for ways to automate repetitive GRC work to scale the program.

Skills

SOC 2 experience

Audit coordination

Security controls testing

Risk assessment

Vendor risk management

Policy writing

Written communication

Job description

YipitData in the United States is seeking a GRC Analyst to lead governance, risk, and compliance initiatives. You will assess controls, coordinate audits, and partner with security, IT, legal, and finance to drive remediation and evidence collection.

You will translate complex regulatory requirements into actionable tasks for technical and non-technical teams, ensure ongoing audit readiness, and help scale the program as our products and AI use evolve.