Governance Risk and Compliance Analyst

You will implement and maintain SOC 2, ISO 27001, HIPAA, and privacy compliance requirements. You will design audit processes and documentation systems, build GRC tooling, assess and mitigate security and compliance risks, maintain policies, and monitor AI regulations and standards.

Responsibilities

• Implement and lead SOC 2, ISO 27001, and HIPAA compliance frameworks
• Maintain compliance with GDPR, CCPA, CPRA, and other privacy regulations
• Design scalable audit-management processes and documentation systems
• Build internal GRC tooling
• Conduct risk assessments and mitigate security and compliance risks
• Write, update, and enact security, privacy, and AI safety policies
• Monitor and help shape the AI regulatory and standards landscape

Requirements

• Audit
• Compliance
• SOC 2
• ISO 27001
• HIPAA
• GDPR
• CCPA
• CPRA
• Risk assessment
• Data security
• AI
• Cloud computing
• Automation

Benefits

• Equity
• Health insurance
• Dental insurance
• Vision insurance
• Retirement benefits
• Fitness benefits
• Commuter accounts
• Dependent care accounts