GRC Analyst

About the Role:

• YipitData is seeking a GRC Analyst to own security compliance and risk management workstreams.
• You will partner with Security, IT, Engineering, Legal, and Finance teams to ensure controls are effective.
• This role requires curiosity, attention to detail, and the ability to translate complex requirements into actionable tasks.

Key Responsibilities:

• Drive GRC workstreams from initiation through evidence collection, testing, and remediation.
• Test security controls and conduct risk assessments to identify gaps and develop realistic remediation plans.
• Support customer security questionnaires, vendor reviews, and maintain audit readiness across SOC 2 and other frameworks.

What We Offer:

• Flexible work hours and flexible vacation to support work-life balance.
• Generous 401(k) match, parental leave, and wellness budget.
• Learning reimbursement and a culture of ownership, respect, and trust.