Grc Analyst Jobs

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits. As Anthropic scales to meet public-company standards, the Sarbanes-Oxley (SOX) control environment over our technology stack is one of the most consequential things this team owns. As part of Security GRC's technical controls assurance function, you will be the voice on what the IT general controls must achieve to support SOX 404 compliance. In partnership with Internal Audit, you will define control requirements and acceptance criteria for the in-scope engineering systems and infrastructure that underpin financial reporting. You will pair with engineering as they design and implement against those requirements, and validate that what ships actually meets the bar before Internal Audit and our external auditors test it. You are the product owner for control design methodology and continuous control monitoring, initially around ITGCs, but extending into other areas of security and compliance to drive visibility where and when we need it. Key responsibilities Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, computer operations, and program development for SOX in-scope systems, in

About the team OpenAI’s Forward Deployed Engineering team partners with customers to turn research breakthroughs into production systems. We operate at the intersection of customer delivery and core platform development. About the role Forward Deployed Engineers (FDEs) lead complex end-to-end deployments of frontier models in production alongside our most strategic customers. You will own discovery, technical scoping, system design, build, and production rollout, partnering directly with customer engineering and domain teams. You will measure success through production adoption, measurable workflow impact, and eval-driven feedback that changes product and model roadmaps. You’ll work closely with our Product, Research, Partnerships, GRC, Security, and GTM teams. This role is based in Madrid. We use a hybrid work model of 3 days in the office per week. We offer relocation assistance. Travel up to 50% is required. In this role you will Own technical delivery across multiple deployments from first prototype to stable production Build full-stack systems that deliver customer value and sharpen how we learn Embed closely with customer teams, understand their needs, and guide adoption of what you build Scope work, sequence delivery, and remove blockers early Make trade-offs between scope, speed, and quality; adjust plans to protect delivery Contribute directly in the code when progress or clarity depends on it Codify working patterns into tools, playbooks, or building blocks that others can use Share field feedback that helps Research and Product understand where the models succeed and where they can improve Keep teams moving through clarity and follow-through You might thrive in this role if you Bring 6+ years of engineering or technical deployment experience that includes customer-facing work Professional fluency in Spanish and English is required, as this role supports Spanish-speaking customers Have scoped and delivered complex systems in fast-moving or ambiguous enviro

About the team OpenAI’s Forward Deployed Engineering team partners with customers to turn research breakthroughs into production systems. We operate at the intersection of customer delivery and core platform development. About the role Forward Deployed Engineers (FDEs) lead complex end-to-end deployments of frontier models in production alongside our most strategic customers. You will own discovery, technical scoping, system design, build, and production rollout, partnering directly with customer engineering and domain teams. You will measure success through production adoption, measurable workflow impact, and eval-driven feedback that changes product and model roadmaps. You’ll work closely with our Product, Research, Partnerships, GRC, Security, and GTM teams. This role is based in London. We use a hybrid work model of 3 days in the office per week. We offer relocation assistance. Travel up to 50% is required. In this role you will Own technical delivery across multiple deployments from first prototype to stable production Build full-stack systems that deliver customer value and sharpen how we learn Embed closely with customer teams, understand their needs, and guide adoption of what you build Scope work, sequence delivery, and remove blockers early Make trade-offs between scope, speed, and quality; adjust plans to protect delivery Contribute directly in the code when progress or clarity depends on it Codify working patterns into tools, playbooks, or building blocks that others can use Share field feedback that helps Research and Product understand where the models succeed and where they can improve Keep teams moving through clarity and follow-through You might thrive in this role if you Bring 6+ years of engineering or technical deployment experience that includes customer-facing work Professional fluency in Spanish and English is required, as this role supports Spanish-speaking customers Have scoped and delivered complex systems in fast-moving or ambiguous enviro

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As one of Vanta’s GTM-facing GRC Subject Matter Experts supporting Vanta for Government (V4G) opportunities, you will be a highly visible, customer-facing leader within Vanta’s Security team, responsible for representing Vanta’s Trust Management Platform to prospects and customers, bringing deep public-sector compliance expertise across FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, and NIST 800-171. You will also have a role in collaborating with internal teams to help drive and implement new V4G product features. This role is specifically involved with Vanta's pre-sales and marketing motions, owning V4G GRC conversations for net-new prospects and the expansion of existing customers' use of the product, as well as supporting marketing efforts by representing Vanta in public-facing conversations and speaking engagements. If this sounds like you, and you're excited to use your Security, Privacy, and broader Gov-focused GRC experience to help grow and sell our product, we'd love to hear from you. Candidates must be based in Pacific, Mountain, or Central time zones for this role. What you’ll do as a Governance, Risk, and Compliance Expert, GTM - V4G at Vanta: Use your expert knowledge of compliance frameworks like FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, and NIST 800-171, to advise customers regarding questions about scoping, policy creation, detailed control requirements and security best practices, and recommend implementations within Vanta’s product related to these frameworks. Partner with Vanta's Sales, Account Management, and Solutions Engineering teams and own public-sector GRC discussions & activities, repr

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As a Director of Product on our Governance & Compliance team, you will own the product strategy and deliver key capabilities that enable Vanta’s GRC product to meet the needs of our largest enterprise customers. You will drive company-wide initiatives requiring deep partnerships across PMM, engineering, design, and go-to-market teams. You will help scale Vanta’s capabilities alongside our rapidly growing customer base and shape the culture and processes of the product team, all while growing the talented PMs you lead. This role reports directly to the VP of Product for Governance and Compliance. What you’ll do as a Director of Product at Vanta: Own the product strategy and roadmap for across trust, audit, and segmentation Inherit, lead and grow a product team: Hire and mentor product managers while establishing strong product thinking and execution. Evolve your area’s product strategy to an AI-first approach, enabling agentic workflows within the product and with the outside ecosystem Be accountable for critical business metrics, including: Revenue from products and add-ons under your purview. Enterprise customer adoption and satisfaction metrics. Collaborate cross-functionally to define a vision and roadmap that balances innovation, scalability, and customer impact. How to be successful in this role: 12+ years of product management experience in high-growth and complex environments. 5+ years of experience hiring, managing, and growing high-performing teams. A passion for scaling B2B SaaS products that serve SMB and enterprise customers alike. A track record of setting clear product vision and business strategies for comple

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is the AI-powered Trust Management platform redefining how businesses earn and prove trust. As a Director of Product, you will lead Vanta’s expansion of agentic workflows, focused on audit and proof outcomes. You will own the strategy and vision for how agentic features and products can accelerate and simplify earning trust through audits, trust centers, questionnaires and more. You will drive an opinionated vision for how LLMs and agentic workflows are natively embedded into enterprise software and own the product strategy and deliver key capabilities that enable Vanta’s GRC product to meet the needs of our largest enterprise customers. You will drive company-wide initiatives requiring deep partnerships across PMM, engineering, design, and go-to-market teams. You will help scale Vanta’s capabilities alongside our rapidly growing customer base and shape the culture and processes of the product team, all while growing the talented PMs you lead. This role reports directly to the VP of Product for Governance and Compliance. What you’ll do as a Director of Product at Vanta: Set the vision and product roadmap for autonomous audit agents—transforming manual internal/external audit workflows into automated workflows, powered by AI Own Questionnaire Automation and Trust Centers, turning customer security postures into a competitive growth driver while partnering directly with EPD and GTM leadership to unblock enterprise deals. Architect the multi-entity, multi-region, and complex organizational structures (business units, divisions, subsidiaries) required to support Fortune 500-level enterprise deployments. Own the product strate

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Information Security team is growing and looking for a Strategic Program Manager to drive strategic initiatives and engagement across the organization. This is a fast-moving role that will help build and mature security practices and partnerships across the organization, working closely with GRC, Security Operations, Security Engineering, Internal Audit, Legal, People, Product, Sales, and business teams as a trusted security partner. You will work closely with security leadership to design programs, manage portfolios, and drive results that scale with our growing business. If you thrive on taking initiative, finding clarity in ambiguity, and driving impactful programs and relationships, we'd love to hear from you! This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Lead strategic security programs from planning through execution, coordinating priorities, dependencies, risks, and accountability across security and business teams Partner with teams across Figma to identify and address security risks, align stakeholders, and translate security priorities into practical guidance and action plans Define and track security program metrics, OKRs, risk registers, and reporting that give leadership visibility into program health, priorities, and risk posture Identify and coordinate the remediation of security gaps by partnering with control owners, security specialists, and business stakeholders to drive issues to reso

We're looking for a Head of Enterprise & Field Marketing to lead and scale our global field marketing organization, own account-based marketing for our largest and most strategic accounts, drive alliances and partner marketing in service of enterprise growth and regional strength; and oversee our strategic events strategy and programs. This is a senior leadership role responsible for the strategy, team, and execution to drive high-quality pipeline and conversion for Diligent’s AI-powered GRC platform in all regions, and design programs that turns enterprise pipeline into revenue through a full-funnel approach, including integrated regional campaigns; 1:1/1:few ABM for named global accounts; bespoke strategic events that offer cut-through experiences for prospects and customers; and leveraging co-marketing of alliances and partnerships for net-new pipeline and brand expansion. You would be joining Diligent at an exciting moment in the company’s history, as they unleash their new AI-powered GRC platform to help General Counsels, Chief Compliance Officers, Audit and Risk Leaders. This is the result of nearly three years of intense development of agentic workflows inside the Diligent platform, as well as MCP/plug-in access to Diligent offerings - providing a robust, differentiated experience for clients who need solutions that accelerate and action critical business objectives, not just static reporting. Working closely with Sales and the broader GTM organization, you will lead an established, multi-region field marketing team and be responsible for evolving it from regional execution into a more specialized, account-centric growth engine — tightly aligned with enterprise sales leadership, customer success, global events, and partner teams. You'll own the budget, the roadmap, and the relationship with sales as the primary marketing partner for our highest-value opportunities. You w

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a talented Security Compliance Operations Lead to manage and mature a security assurance function within Security GRC. This role will help ensure key security safeguards are operating effectively across Rockstar’s global technology environments. Leveraging cross-domain cybersecurity expertise, you will lead control validation strategy, mature security compliance operations capabilities, use automation to scale control validation, evidence collection, and reporting, and provide leadership with clear visibility into security posture and risk reduction. This is a full-time, in-office position based in Rockstar’s large game development studio in Bangalore, India. WHAT WE DO The Rockstar Games Security team is responsible for advancing the state of information security across the company globally in collaboration with numerous partners and stakeholders by prioritizing and executing security initiatives that drive down risk. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define information security policies, standards, and procedures to safeguard our business and protect our players. We lead efforts to build enterprise security controls ranging from endpoint protection technologies to security incidents and event monitoring solutions. We have a passion for identifying threats and vulnerabilities and coming up with clever solutions to mitigate or remediate those risks. RESPONSIBILITIES Ensure key security safeguards are operating operate effectively across Rockstar’s global technology environments. L

About the team OpenAI’s Forward Deployed Engineering team partners with customers to turn research breakthroughs into production systems. We operate at the intersection of customer delivery and core platform development. About the role Forward Deployed Engineers (FDEs) lead complex end-to-end deployments of frontier models in production alongside our most strategic customers. You will own discovery, technical scoping, system design, build, and production rollout, partnering directly with customer engineering and domain teams. You will measure success through production adoption, measurable workflow impact, and eval-driven feedback that changes product and model roadmaps. You’ll work closely with our Product, Research, Partnerships, GRC, Security, and GTM teams. This role is based in Sydney. We use a hybrid work model of 3 days in the office per week. We offer relocation assistance. Travel up to 50% is required. In this role you will Own technical delivery across multiple deployments from first prototype to stable production. Build full-stack systems that deliver customer value and sharpen how we learn. Embed closely with customer teams, understand their needs, and guide adoption of what you build. Scope work, sequence delivery, and remove blockers early. Make trade-offs between scope, speed, and quality; adjust plans to protect delivery. Contribute directly in the code when progress or clarity depends on it. Codify working patterns into tools, playbooks, or building blocks that others can use. Share field feedback that helps Research and Product understand where the models succeed and where they can improve. Keep teams moving through clarity and follow-through. You might thrive in this role if you Bring 5+ years of engineering or technical deployment experience that includes customer-facing work. Have scoped and delivered complex systems in fast-moving or ambiguous environments. Write and review production-grade code across frontend and backend using Python, JavaScr

SPECIFIC JOB RESPONSIBILITIES Defensive Operations (SecOps): Design and automate the Security Incident Response (SIR) and Vulnerability Response (VR) lifecycles. Build playbooks in Flow Designer to automate threat containment and remediation. Offensive Operations: Develop custom scoped applications to track penetration testing results, manage red-team engagement lifecycles, and automate the ingestion of reconnaissance data. Compliance & GRC: Configure and customize Integrated Risk Management (IRM) modules to map technical controls to frameworks like SOC2, ISO 27001, HIPAA, and FedRAMP. Integrations & Orchestration: Build robust, secure integrations (REST/SOAP, IntegrationHub , MID Servers) with our XDR, SIEM (Splunk/Sentinel), and cloud-native services (AWS/Azure/GCP). Multi-Tenancy & MSSP Architecture: Architect a scalable, multi-tenant environment that ensures strict data isolation between clients while allowing for unified " ClickOps " and Terraform-driven automation. AI & Innovation: Explore and implement Now Assist (GenAI) and AI-heavy workflows to automate security reporting and incident summarization. Defensive Operations (SecOps): Design and automate the Security Incident Response (SIR) and Vulnerability Response (VR) lifecycles. Build playbooks in Flow Designer to automate threat containment and remediation. Offensive Operations: Develop custom scoped applications to track penetration testing results, manage red-team engagement lifecycles, and automate the ingestion of reconnaissance data. Compliance & GRC: Configure and customize Integrated Risk Management (IRM) modules to map technical controls to frameworks like SOC2, ISO 27001, HIPAA, and FedRAMP. Integrations & Orchestration: Build robust, secure integrations (REST/SOAP, IntegrationHub , MID Servers) with our XDR, SIEM (Splunk/Sentinel), and cloud-native services (AWS/Azure/GCP)

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

JOIN OUR TEAM Als Legal Operations & Compliance Manager unterstützt du unser Legal Team in unserem Headquarter in München beim Aufbau einer innovativen Legal & Compliance Tech-Organisation und begleitest spannende (Wachstums-)Projekte. Du fungierst dabei als Legal Business Partner auf Augenhöhe mit anderen Unternehmensbereichen. Diese Position ist zunächst befristet auf 1,5 Jahre , der Arbeitsort ist München . WHAT YOU'LL DO Überwachung und Optimierung von rechtlichen und compliance-relevanten Unternehmensprozessen sowie von Legal-KPIs, einschließlich Legal easy GRC und Legal-KPI-Tracking für die CSRD-Berichterstattung Schaffung effizienter Workflows z.B. im Contract-Lifecycle-Tool, in enger Zusammenarbeit mit den operativen Business-Bereichen Rechtliches Projektmanagement von Sonderprojekten wie Expansionen, Restrukturierungen oder neuen Geschäftsmodellen unter smarter Anwendung von Projektmanagement-Tools und KI sowie die Koordination externer Berater Unterstützung des Legal-Teams bei der effektiven digitalen Standardisierung von Verträgen, bei der Einführung von Compliance-Chatbots, Legal-Tech-Triage und automatisierten KI-Agenten (einschließlich Vertragsbearbeitung, Dokumentenerstellung und Überwachung regulatorischer Anforderungen) Implementierung eines State-of-the-Art Legal-Budget- & Invoicing-Tools zur fachübergreifenden Kostentransparenz Smartes Litigation- und Insurance-Management sowie halbautomatisiertes Reporting gegenüber der Finanzabteilung und Abschlussprüfern Unterstützung bei der Umsetzung relevanter konzernstrategischer Themen wie der KI-Transformation und dem IP-Research YOU COME WITH Mindestens zwei Jahre Erfahrung in einer IT-Beratung, einem Legal-Tech-Unternehmen oder als Legal Operations Manager bei einem Wirtschaftsunternehmen Einem erfolgreich absolvierten Studium im Bereich (Wirtschafts-)Informatik oder einer vergleichbaren Qualifikation Idealerweise juristische Vorkenntnisse, z.B. als deutscher Wirtschaftsjurist oder belegt durch einen ju

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is hiring for a Head of Design (VP) to lead our design organization — setting direction for a ~40-person team, shaping the next generation of AI-native product experiences, and building the quality systems that let great design ship at scale. The Design team at Vanta shapes how security and compliance teams experience Vanta — from a startup founder building their security program for the first time to an enterprise security team managing hundreds of controls. The org spans all areas of Vanta — GRC, Trust, Platform, Self-serve, and AI — and includes product designers, visual designers, design engineering, content designers, and a user researcher, led by experienced design directors. As AI fundamentally changes what products can do and how they get built, this team is at an inflection point: the right leader will define what it means for a design org to be genuinely AI-forward — enabling designers to move faster, ship more, and contribute to product direction and delivery in new ways. This is the right role for a design leader who leads with AI fluency, brings strong taste and craft across interaction design and visual design, and has the operational instincts to build the systems that make quality a consistent property of the whole org. What you’ll do as Head of Design at Vanta: Lead a team of ~40 designers and design directors across GRC, Trust, Platform, Self-serve, and AI — setting org-wide direction and enabling each leader to do their best work Lead the team building the next generation of agentic, AI-native product experiences — defining what great design looks like as Vanta’s products are increasingly shaped by AI E

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta's Design Systems team is the foundational layer that powers visual consistency, design quality, and engineering velocity across all of Vanta's product surfaces. The Design Systems team builds and maintains Vanta's shared component library, design tokens, interaction patterns, and documentation — enabling product designers and engineers to ship high-quality, cohesive experiences at scale. As Vanta grows across GRC, Trust, Design Systems, and new product areas, the Design Systems team plays a critical role in maintaining quality, reducing design and engineering debt, and accelerating the entire product organization. What you’ll do as a Staff Product Designer at Vanta: Building and evolving a robust, scalable component library used across every product team Establishing and maintaining design tokens, typography, spacing, color systems, and interaction patterns Creating and enforcing documentation standards, contribution models, and design governance frameworks Partnering with front-end engineering to ensure design-to-code fidelity and maintain a shared component vocabulary Driving design system adoption across product teams through education, tooling, and proactive partnership Evolving the design system to support accessibility and platform scalability across Vanta's growing product suite Deep expertise building and maintaining scalable design systems for complex B2B SaaS products, including component architecture, design tokens, and pattern libraries Strong visual design foundation with mastery of typography, color theory, spacing, interaction design, and accessibility principles Proven ability to govern and evolve a design