Senior GRC Analyst: SOC 2 & AI-Driven Compliance

The Wrap; San Francisco (CA); Hybrid; USD 183,000 - 205,000; Full time

Benefits offered by this job

Equity (RSUs)

Total rewards

Job summary

Gusto is seeking a Security, Governance, Risk & Compliance professional to guide our GRC maturity from foundational to steady-state operations. You will leverage AI to automate controls and ensure ongoing SOC 2 Type 2 and related framework compliance, partnering across departments to embed security-minded practices.

The role involves cross-functional collaboration with Legal, Engineering, IT, and Sales, building scalable GRC processes and KPI-driven insights.

Qualifications

• 8+ years of governance, risk, and compliance experience in SaaS.
• Experience leading SOC 2 Type 2 initiatives with auditors.
• Ability to translate GRC requirements into scalable processes.

Responsibilities

• Develop and maintain security and compliance SOPs and policies (SOC 2 readiness).
• Own trust management platforms including controls, risks, vendors, and exceptions; advance AI-driven controls tooling.
• Collaborate with Legal, Enterprise Applications, and other teams to set data governance policies.
• Conduct risk assessments and coordinate remediation with teams.
• Manage third-party vendor risk program including onboarding and renewals.
• Interface with external auditors and regulators during assessments.
• Stay current on relevant compliance frameworks and regulations.
• Partner cross-functionally to implement scalable GRC processes.

Skills

GRC experience

SOC 2

Data analytics

Communication

Cross-functional collaboration

Education

Bachelor's degree in Business/Information Systems

Tools

Optro

Vanta

Drata

Viso Trust

Job description

Gusto is seeking a Security, Governance, Risk & Compliance professional to guide our GRC maturity from foundational to steady-state operations. You will leverage AI to automate controls and ensure ongoing SOC 2 Type 2 and related framework compliance, partnering across departments to embed security-minded practices.

The role involves cross-functional collaboration with Legal, Engineering, IT, and Sales, building scalable GRC processes and KPI-driven insights.