GRC Analyst

ABOUT THE ROLE We are seeking a highly motivated and detail-oriented GRC Analyst to join our Governance, Risk & Compliance (GRC) team at Vercel. As a key member of our team, you will be responsible for managing and maintaining ongoing compliance with security and privacy frameworks, policies, procedures, and commercial assessments. Your role will be instrumental in ensuring that our company operates ethically, responsibly, and in accordance with regulatory requirements. WHAT YOU'LL DO As a GRC Analyst, you will collaborate with cross-functional teams to promote a culture of accountability and integrity throughout the organization. Your responsibilities will include: - Collaborating with internal teams to maintain an effective suite of internal controls and driving remediation efforts to completion with clear documentation of progress. - Building strong working relationships across the business to ensure compliance accountability is shared and stakeholders are informed. - Streamlining annual audits by managing audit deliverables, developing treatment plans, and coordinating across teams to document and track completion to ensure audit success. - Monitoring and improving controls, processes, and evidence management practices, identifying opportunities to automate and streamline GRC operations, and contributing to controls maturity scoring and reporting. - Enabling go-to-market teams and accelerating deal cycles by supporting security questionnaires, addressing compliance inquiries, and maintaining clear, customer-facing documentation on Vercel's security and compliance posture. - Designing and managing company training and enhancing visibility on compliance-specific topics for internal stakeholders to ensure an understanding of compliance, ethics, and regulatory requirements within the organization. WHAT YOU'LL NEED To be successful in this role, you will need: - At least 3 years of relevant experience in supporting the audit lifecycle in a cloud-centric environment (SOC 2, ISO 27001, PCI, HIPAA, etc.), with strong organizational skills to be flexible and proactive in a high-growth, start-up environment. - Experience collaborating closely with internal partners to seamlessly incorporate policies and technical controls into the SDLC. - Strong project management skills and sense of ownership with the ability to communicate and collaborate effectively, and execute projects across various business units and levels. WHY REMOTE As a remote employee, you will have the flexibility to work from anywhere and will be part of a global team that values collaboration and open communication. You will have the opportunity to work with a talented team of professionals who are passionate about building a secure and compliant platform. BENEFITS We offer a competitive compensation package, including equity, as well as a range of benefits to support your well-being and career development. These include: - Competitive compensation package, including equity. - Inclusive Healthcare Package. - Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. - Flexible Time Off. - We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. Salary: The San Francisco, CA base pay range for this role is $134,000-$202,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location.