Governance, Compliance, and Risk Analyst

📋 Description

• Support ongoing compliance programs across SOC 1, SOC 2, PCI, HITRUST, HIPAA
• Coordinate audit activities: evidence collection, documentation, and auditor responses
• Track compliance requirements and follow up with stakeholders on outstanding items
• Conduct vendor risk assessments and third‑party due diligence
• Complete first-pass reviews of vendor and client security questionnaires with Security Engineering
• Maintain and update security and compliance policies and documentation

🎯 Requirements

• 2–5 years of experience in Governance, Risk, and Compliance or related field
• Familiarity with SOC 2, PCI-DSS, HIPAA, or HITRUST
• Experience supporting audits and managing evidence collection
• Understanding of vendor risk management and third-party due diligence processes
• Strong organizational skills with the ability to manage multiple concurrent deadlines
• Excellent written and verbal communication skills, especially for cross-functional collaboration

🎁 Benefits

• Equity in the company
• Medical, Dental and Vision premiums covered at 100%
• Fully paid parental leave
• Commuter benefits
• 401k benefits
• Unlimited vacation and paid holidays