GRC Analyst | Vercel
Full time Hybrid @AlfaCareers Official posted 1 day ago in Information Technology / Software Development , in Security / Safety Shortlist Email JobJob Detail
-
Job ID 368067
-
Career Level Others
-
Experience 3 Years
-
Gender Any
-
Industry Information Technology (IT)
-
Qualifications Degree Bachelor
Job Description
Vercel is hiring a Governance, Risk and Compliance (GRC) Analyst. This is a hybrid role based in San Francisco, New York City, or London, with three days a week in the office. Vercel is the agentic infrastructure company, freeing people and agents to ship what’s next. For more than a decade we’ve helped builders move from idea to production with speed, security, and an exceptional developer experience. Now we’re scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
About the role
We are looking for a Governance, Risk and Compliance (GRC) Analyst who wants to build GRC with AI, and you do not need to be an engineer to do it. We encourage and equip you to use AI tooling to build automations for audit evidence and customer security questionnaires, alongside assessing AI tools and vendors and managing audits.
What you’ll do
- Assess AI tools and vendors against security, privacy, and compliance requirements, and run company compliance and ethics training
- Maintain the internal controls behind ISO 27001, System and Organization Controls 2 (SOC 2), Health Insurance Portability and Accountability Act (HIPAA), and Payment Card Industry Data Security Standard (PCI DSS) compliance, and drive remediation to completion with documented progress
- Use AI tooling to build automations that collect audit evidence, monitor controls, and draft security questionnaire responses, and report on controls maturity scores
- Manage annual audit deliverables, write treatment plans, and track completion across teams
- Answer customer compliance inquiries and maintain customer-facing security and compliance documentation
What you need
- 3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment
- Applied security or privacy controls to AI systems or AI vendors, such as model access, data handling, and logging
- Built security policies and technical controls into the software development lifecycle (SDLC) with engineers
- Led compliance projects across multiple business units and seniority levels
Bonus if you
- Built an automation or internal tool, with code or AI coding tools, even outside an engineering role
- Worked with AI governance frameworks such as ISO/IEC 42001 or the National Institute of Standards and Technology AI Risk Management Framework
- Hold a Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) certification
Compensation & Benefits:
- Competitive compensation package, including equity
- Inclusive Healthcare Package
- Learn and Grow – we provide mentorship and send you to events that help you build your network and skills
- Flexible Time Off
- We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space
The San Francisco, CA base pay range for this role is $134,000-$202,000.
Source: Vercel. Apply here: https://job-boards.greenhouse.io/vercel/jobs/6102654004
Other jobs you may like
-
Data Engineer, Product | Notion
- @ AlfaCareers Official
- San Francisco, CA, United States