Trust & Compliance Operations Analyst

Everlaw; San Francisco (CA); On-site; USD 140,000 - 178,000; Full time

Benefits offered by this job

Salary range: $140,000 – $178,000 (to

Equity program

401(k) retirement plan with company

Health, dental, and vision

Flexible Spending Accounts

Paid parental leave and sick leave

Vacation days and holidays

Learning and development opportunities

Company‑sponsored life and disability

Job summary

Everlaw seeks a GRCT Analyst to independently drive moderately complex trust, compliance, and risk workstreams. You will translate security and compliance posture into audit-ready and customer-ready outputs, collaborating with Security, Legal, IT, and cross-functional teams to close gaps and maintain governance.

This role spans audit readiness, trust content maintenance, and program improvements. You will manage customer security questionnaires, support SLAs, and contribute to training programs,

Qualifications

• 5+ years of experience in a Governance, Risk, Compliance, and Trust role.
• Experience supporting FedRAMP, SOC 2, ISO 27001/27017/27018 or similar.
• Led completion of customer security questionnaires and trust portals.
• Ability to translate complex topics into clear, written deliverables.

Responsibilities

• Translate Everlaw’s security and compliance posture into audit-ready outputs.
• Support audit readiness across FedRAMP, SOC 2, and ISO frameworks.
• Manage compliance operations including evidence requests and policy updates.
• Partner with Security, Legal, IT, and other stakeholders to produce outputs.
• Maintain trust content across repositories and response libraries.
• Lead vendor review workstreams and security assessments.
• Deliver security training program workstreams and ensure timely completion.

Skills

Governance risk compliance

Audit readiness

Policy maintenance

Customer trust understanding

Tools

GRC tooling

Job description

Everlaw seeks a GRCT Analyst to independently drive moderately complex trust, compliance, and risk workstreams. You will translate security and compliance posture into audit-ready and customer-ready outputs, collaborating with Security, Legal, IT, and cross-functional teams to close gaps and maintain governance.

This role spans audit readiness, trust content maintenance, and program improvements. You will manage customer security questionnaires, support SLAs, and contribute to training programs,