Governance, Risk & Compliance Analyst

Governance, Risk & Compliance Analyst responsible for implementing SOC2, ISO 27001, HIPAA and privacy regulations (GDPR/CCPA), building GRC tooling and audit processes, conducting risk assessments, and shaping AI regulatory policies. Requires 6+ years in audit/compliance, experience automating compliance with AI agents, and high-tech cloud-native background.

About the job

What You'll Do

Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA, ensuring compliance with certification requirements.
Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations.
Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks.
Build internal GRC platform and tooling.
Conduct risk assessments and mitigate data security and compliance risks.
Write, update and enact policies capturing security, privacy, and AI safety requirements.
Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices.

What You'll Bring

6+ years of experience leading engagements in audit and compliance.
Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling.
Worked in high tech companies in cloud-native environments.
Able to translate complex compliance requirements into clear and actionable work-streams.
Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering.
Self-motivated, detailed and organized, with a diligent approach to project completion.
Excellent written, verbal, and interpersonal communication skills.

Skills

Soc2, ISO 27001, HIPAA, GDPR, CCPA, Cpra, GRC, Risk Assessment, Audit Management, AI Agents, Compliance Automation, Policy Development, Ai Safety, Cloud Native