Senior GRC Analyst: AI-Driven Compliance & Risk Leader

Logoslabs

San Francisco (CA)

Remote

USD 155,000 - 185,000

Full time

12 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Equity

Flexible PTO

Health benefits

401(k)

Job summary

Garner is seeking a Senior GRC Analyst to join the Technical Compliance team to ensure our posture across ISO 27001, SOC 2, HITRUST, and HIPAA. You will run internal audits, guide external assessments, and partner with Engineering, Product, People, and Legal to ensure controls are designed well, operate effectively, and continuously improve.

This role enables enterprise growth, security, and trust as we scale with AI and automation across the org.

Qualifications

5+ years in GRC, IT audit, or information security compliance.
Experience with HITRUST, SOC 2, and ISO 27001 audits.
Hands-on control design, evidence collection, and remediation in a cloud-native environment.
Proven ability to adapt communication across engineers, operators, and executives.
GRC Engineering mindset with scripting and LLMs to automate repetitive tasks.
Desire to be part of a high-performing, mission-driven team with urgency and accountability.
Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred.

Responsibilities

Manage and support compliance certifications (SOC 2, HITRUST, ISO 27001) audits and control testing across the lifecycle.
Serve as the subject matter expert across the company on our compliance frameworks.
Primary point of contact for external auditors and assessors.
Manage Garner’s Security and Privacy trust center.
Maintain the risk register and drive risk identification, scoring, and reporting.
Maintain the maintenance of our compliance policies, standards, and procedures.
Report on our compliance posture to senior leadership.
Scale our GRC function with AI and automation, enabling Engineering to automate the rest.