GRC Analyst

Responsibilities

• Collaborate with internal teams to maintain an effective suite of internal controls and drive remediation efforts to completion with clear documentation of progress.
• Build strong working relationships across the business so compliance accountability is shared and stakeholders are informed.
• Streamline annual audits by managing audit deliverables, developing treatment plans, and coordinating across teams to document and track completion to ensure audit success.
• Monitor and improve controls, processes, and evidence management practices; identify opportunities to automate and streamline GRC operations; contribute to controls maturity scoring and reporting.
• Enable go-to-market teams and accelerate deal cycles by supporting security questionnaires, addressing compliance inquiries, and maintaining clear, customer-facing documentation on Vercel’s security and compliance posture.
• Design and manage company training and enhance visibility on compliance-specific topics for internal stakeholders to ensure an understanding of compliance, ethics, and regulatory requirements.

Requirements

• At least 3 years of relevant experience in supporting the audit lifecycle in a cloud-centric environment (SOC 2, ISO 27001, PCI, HIPAA, etc.).
• Strong organizational skills to be flexible and proactive in a high-growth, start-up environment.
• Experience collaborating closely with internal partners to seamlessly incorporate policies and technical controls into the SDLC.
• Strong project management skills and sense of ownership with the ability to communicate and collaborate effectively, and execute projects across various business units and levels.

Nice-to-Haves

• Strong experience with cloud infrastructure (e.g., Azure, AWS).
• Familiarity with compliance or software development tools and systems (e.g., Drata, Linear, Datadog, etc.).
• Experience with frontend development and open source components.
• Relevant industry certifications (i.e., CISM, CISSP, CCEP).