GRC Analyst

We are looking for a GRC Analyst to join our Governance Risk & Compliance (GRC) team. You will have the opportunity to manage and maintain ongoing compliance with security and privacy frameworks policies procedures and commercial assessments including ISO 27001 SOC 2 HIPAA PCI DSS and more. Your role will be instrumental in ensuring that our company operates ethically responsibly and in accordance with regulatory requirements.

You will collaborate with cross-functional teams to promote a culture of accountability and integrity throughout the organization and foster an environment where everyone understands the importance of adhering to established guidelines and ethical practices. You will report to the Head of GRC and will be located ((remote onsite hybrid)).

Think you may not have all the skills and are hesitant to apply? There is no “perfect” candidate and encourage you to apply if you think that you can bring value to our team and are passionate and committed to upholding the highest standards of compliance and ethics.

If you’re based within a pre-determined commuting distance of one of our offices (SF NY London or Berlin) the role includes in-office anchor days on Monday Tuesday and Friday even if the role is listed as remote. For location-specific details please connect with our recruiting team.

• Collaborate with internal teams to maintain an effective suite of internal controls and driving remediation efforts to completion with clear documentation of progress.
• Build strong working relationships across the business so compliance accountability is shared and stakeholders are informed.
• Streamline annual audits by managing audit deliverables developing treatment plans and coordinating across teams to document and track completion to ensure audit success.
• Monitor and improve controls processes and evidence management practices identify opportunities to automate and streamline GRC operations and contribute to controls maturity scoring and reporting
• Enable go-to-market teams and accelerate deal cycles by supporting security questionnaires addressing compliance inquiries and maintaining clear customer-facing documentation on Vercel’s security and compliance posture.
• Design and manage company training and enhance visibility on compliance-specific topics for internal stakeholders to ensure an understanding of compliance ethics and regulatory requirements within the organization.

• At least 3 years of relevant experience in supporting the audit lifecycle in a cloud-centric environment (SOC 2 ISO 27001 PCI HIPAA etc.) with strong organizational skills to be flexible and proactive in a high-growth start-up environment.
• Experience collaborating closely with internal partners to seamlessly incorporate policies and technical controls into the SDLC.
• Strong project management skills and sense of ownership with the ability to communicate and collaborate effectively and execute projects across various business units and levels.

• Strong experience with cloud infrastructure (e.g. Azure AWS)
• Familiarity with compliance or software development tools and systems (e.g. Drata Linear Datadog etc.)
• Experience with frontend development and open source components
• Relevant industry certifications (i.e. CISM CISSP CCEP) is a plus but not required

• Competitive compensation package including equity.
• Inclusive Healthcare Package.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role and a WFH budget for you to outfit your space as needed.

The San Francisco CA base pay range for this role is $134000-$202000. Actual salary will be based on job-related skills experience and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits equity-based compensation and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.

What We Do

From solo developers building their first app to large enterprise teams if it needs to be fast reliable and beautifully built it runs on Vercel. Our platform powers millions of deployments a day. We started with a simple belief: the web should be fast for everyone everywhere. That belief became Next.js. Then a platform. Then the infrastructure layer for the AI-native web.We are backed by the amazing team at Accel and CRV and we're headquartered in San Francisco.