Remote IT Risk & Compliance Analyst

Huge; United States; Remote; USD 80,000 - 90,000; Full time

Job summary

Huge is seeking an IT Risk and Compliance Analyst to join its IT Risk and Compliance team. The role covers contract analysis, data privacy, audit readiness, evidence collection in the GRC system, and vendor risk management.

You will translate contractual obligations into tracked commitments, respond to security questionnaires, and support data retention, privacy, and incident response programs. Strong organization and cross-functional communication are essential.

Qualifications

• 3–5 years of experience in compliance, GRC, contract management, privacy, or a related field.
• Hands-on experience reading and reviewing commercial contracts, ideally MSAs/DPAs or security addenda, with legal counsel on redlines.
• Clear, concise written communication; ability to summarize long contracts.
• Exceptional organization and follow-through; ability to manage many parallel threads without slips.

Responsibilities

• Review client MSAs, SOWs, DPAs, and security addenda; coordinate redlines to signature.
• Translate contractual obligations into tracked commitments and verify operationally.
• Respond to client security questionnaires and due diligence requests; maintain a reusable answer library.
• Collect, organize, and maintain control evidence in the GRC platform; track remediation against SOC 2, ISO 27001, NIST CSF.
• Support vendor risk assessments; review vendor security documentation and sub-processor lists.
• Operationalize data retention and disposal policy; verify retention settings across platforms.
• Support privacy program activities including data mapping and GDPR/CCPA tracking.
• Draft and maintain compliance policies and SOPs; publish and ensure adherence.
• Prepare risk and compliance status reports for leadership.
• Participate in business continuity, disaster recovery planning, and tabletop exercises.
• Participate in security incident response management; maintain risk register for annual assessment.
• Administer security awareness training and track compliance.
• Support internal audits, access reviews, and periodic control testing.

Skills

Contract management

GRC

Privacy

Written communication

Organization

Education

Bachelor's degree

Tools

Contract analysis tooling

Job description

Huge is seeking an IT Risk and Compliance Analyst to join its IT Risk and Compliance team. The role covers contract analysis, data privacy, audit readiness, evidence collection in the GRC system, and vendor risk management.

You will translate contractual obligations into tracked commitments, respond to security questionnaires, and support data retention, privacy, and incident response programs. Strong organization and cross-functional communication are essential.