Remote GRC Associate (Part-Time) | SOC2/PCI, Equity & PTO

Unit21; United States; Remote; USD 69,000 - 90,000; Part time

Benefits offered by this job

Pre-IPO equity

Medical, dental, and vision insurance

Unlimited PTO and generous leave

401(k)

Learning stipend

Home office setup

Job summary

Unit21 is seeking a part-time GRC Associate to run the day-to-day governance, risk and compliance work. You will own audit evidence, security questionnaire responses, the compliance calendar and vendor reviews, collaborating with Security, Sales and Solutions Engineering.

The Head of Security signs off policy and risk decisions. You will manage SOC 2 Type II audit readiness, PCI reviews, and customer security questionnaire responses, ensuring updated evidence and a current Trust Center.

Qualifications

• 2-4 years in GRC, security compliance or IT audit, ideally at a B2B SaaS company.
• Supported at least one SOC 2 Type II audit: evidence collection, control testing and auditor requests.
• Has answered customer security questionnaires or DDQs.
• Clear writing: customer-facing answers should need only light review.
• Organized and persistent; you can track many small asks across teams and follow up without escalation.

Responsibilities

• Audit readiness: map controls in Drata, connect integrations, close gaps and keep evidence current.
• Coordinate SOC 2 audit cycle: auditor coordination, evidence requests, walkthroughs and remediation tracking.
• Run PCI reviews and track external scan findings to closure.
• Prepare recurring SOC 2 evidence: access reviews, audit-log exports and incident summaries.
• Chase owners to close postmortem follow-ups and control gaps across Teams.

Skills

GRC experience

SOC 2

Security questionnaires

Clear writing

Organized and persistent

Tools

Drata

Vanta

Secureframe

OneTrust

Job description

Unit21 is seeking a part-time GRC Associate to run the day-to-day governance, risk and compliance work. You will own audit evidence, security questionnaire responses, the compliance calendar and vendor reviews, collaborating with Security, Sales and Solutions Engineering.

The Head of Security signs off policy and risk decisions. You will manage SOC 2 Type II audit readiness, PCI reviews, and customer security questionnaire responses, ensuring updated evidence and a current Trust Center.