GRC Analyst

Overview

Support Vercel's Governance, Risk & Compliance team by maintaining security and privacy compliance, managing audits, and improving controls and evidence practices.

What you'll do

• Maintain internal controls and drive remediation efforts to completion.
• Manage audit deliverables, treatment plans, and completion tracking.
• Improve controls, processes, evidence management, and GRC operations.
• Support security questionnaires and compliance inquiries for go-to-market teams.
• Maintain customer-facing security and compliance documentation.
• Design and manage compliance training for internal stakeholders.

What you'll need

• At least 3 years of relevant audit lifecycle experience in a cloud-centric environment.
• Experience with frameworks including SOC 2, ISO 27001, PCI DSS, or HIPAA.
• Experience incorporating policies and technical controls into the SDLC.
• Strong project management and organizational skills.
• Ability to communicate and collaborate across business units and levels.

Nice to have

• Experience with cloud infrastructure such as Azure or AWS.
• Familiarity with tools such as Drata, Linear, or Datadog.
• Experience with frontend development and open source components.
• Relevant certifications such as CISM, CISSP, or CCEP.

Details

• Remote in the United States.
• In-office anchor days may apply for candidates near offices in San Francisco, New York, London, or Berlin.
• San Francisco base pay range: $134,000–$202,000 yearly.