Remote GRC & Security Controls Analyst

yipitdatajobs; United States; Hybrid; USD 90,000 - 130,000; Full time

Job summary

YipitData is seeking a GRC Analyst to lead governance, risk, and compliance initiatives. You will identify gaps, validate controls, and drive remediation across Security, IT, Engineering, Legal, Finance, and People.

The role emphasizes turning complex requirements into actionable work and maintaining audit readiness. You will partner with multiple teams, review vendors, assist with customer security questionnaires, and help shape policies and risk narratives.

Qualifications

• Experience in GRC, audits, and risk assessments.
• Ability to translate compliance requirements into actionable work.
• Collaborative across Security, IT, Engineering, Legal, Finance and People.

Responsibilities

• Take ownership of GRC workstreams from initial request through evidence collection, testing, remediation and completion.
• Help keep audit readiness throughout the year.
• Test security controls and verify they are working beyond document submission.
• Conduct risk assessments, identify gaps, and help teams create realistic remediation plans.
• Map controls across SOC 2 and other frameworks to satisfy multiple requirements.
• Coordinate recurring work like access reviews, control testing, policy reviews, risk updates, and audit evidence requests.
• Review vendors to ensure security practices meet expectations.
• Support customer security questionnaires with accurate, consistent answers.
• Translate compliance requirements into clear actions for non-GRC teams.
• Draft and maintain policies, standards and risk records.

Skills

GRC

Audit experience

Security testing

Stakeholder collaboration

Job description

YipitData is seeking a GRC Analyst to lead governance, risk, and compliance initiatives. You will identify gaps, validate controls, and drive remediation across Security, IT, Engineering, Legal, Finance, and People.

The role emphasizes turning complex requirements into actionable work and maintaining audit readiness. You will partner with multiple teams, review vendors, assist with customer security questionnaires, and help shape policies and risk narratives.