Grc Analyst Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is looking for a Senior Account Executive for our Upmarket team to take full ownership of the sales cycle in the UK market — bringing in new upmarket logos and helping shape the commercial sales playbook as we scale our EMEA presence. Vanta is growing quickly, and we're consistently outpacing our growth targets while maintaining exceptionally strong NPS scores. Our Sales team is leading the charge in growing market share as the category leader in compliance automation and trust management — and our EMEA commercial motion is a major part of that story. As a Senior Account Executive in the UK, you'll be one of the key contributors to establishing Vanta's footprint in this market, converting both outbound and inbound pipeline into long-term customers and helping define how we sell to upmarket companies across the region. What you’ll do as an Account Executive at Vanta: Identify high-potential business verticals and execute outbound strategies to engage upmarket prospects across the UK and Ireland Own the full sales cycle — from initial outreach through discovery, demo, negotiation, and close Convert inbound demand into closed-won business and long-term Vanta customers Manage and grow your pipeline, contributing to the maturation of Vanta's commercial sales process and playbook Tailor demos and sales materials to communicate the specific value of Vanta for each upmarket buyer Forecast accurately on a monthly and quarterly basis, maintaining strong pipeline hygiene in Salesforce Collaborate cross-functionally with SDRs, Solutions Engineering, GRC specialists, Legal, and Deal Desk throughout the sales process Surface prospect i

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is looking for a Sr Account Executive for our Upmarket team to take full ownership of the sales cycle in the UK market — bringing in new upmarket logos and helping shape the commercial sales playbook as we scale our EMEA presence. Vanta is growing quickly, we're profitable, and we're consistently outpacing our growth targets while maintaining exceptionally strong NPS scores. Our Sales team is leading the charge in growing market share as the category leader in compliance automation and trust management — and our EMEA commercial motion is a major part of that story. As a Sr AE in the UK, you'll be one of the key contributors to establishing Vanta's footprint in this market, converting both outbound and inbound pipeline into long-term customers and helping define how we sell to upmarket companies across the region. What you’ll do as an Account Executive at Vanta: Identify high-potential business verticals and execute outbound strategies to engage upmarket prospects across the UK Own the full sales cycle — from initial outreach through discovery, demo, negotiation, and close Convert inbound demand into closed-won business and long-term Vanta customers Manage and grow your pipeline, contributing to the maturation of Vanta's commercial sales process and playbook Tailor demos and sales materials to communicate the specific value of Vanta for each upmarket buyer Forecast accurately on a monthly and quarterly basis, maintaining strong pipeline hygiene in Salesforce Collaborate cross-functionally with SDRs, Solutions Engineering, GRC specialists, Legal, and Deal Desk throughout the sales process Surface prospect insights to inform

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. We are seeking a Senior Product Security Engineer to serve as a technical leader and strategic contributor within our Product Security team. This role goes beyond execution — you will drive the evolution of CLEAR’s application security posture by influencing architecture, shaping security engineering processes, and mentoring team members in security and engineering. You’ll lead security initiatives across the organization and help embed security into every stage of our software development lifecycle. What you'll do: Drive security strategy and implementation across all CLEAR products and engineering teams, ensuring consistent protection of customer and business-critical assets. Partner with engineering leadership to align application security initiatives with company-wide technology and product roadmaps, balancing innovation with risk mitigation. Provide technical leadership across CLEAR’s application security initiatives, guiding architecture, design, and development to meet high security standards. Serve as a trusted advisor to cross-functional teams — including Engineering, DevOps, Product, GRC, and IT — enabling secure-by-design practices across the organization. Design and drive implementation of scalable automated security controls and testing frameworks integrated into CLEAR’s CI/CD pipelines. Lead complex threat modeling, architecture reviews, and risk assessments across high-value systems and platforms, driving meaningful security outcomes. Engage with CLEAR's customers to provide insight and support their fraud and ident

Location: Remote (U.S.) Clearance: Ability to obtain and maintain a Public Trust Salary Range: 100K – 120K LTS is seeking a skilled and mission-focused Cyber Security Engineer to support a major modernization initiative within the Department of Veterans Affairs (VA) health portfolio. This role will support cybersecurity engineering, risk management, and security modernization efforts across enterprise healthcare systems and infrastructure environments supporting Veteran healthcare operations nationwide. The ideal candidate will possess strong experience securing complex federal IT systems, supporting cloud and hybrid environments, and implementing cybersecurity solutions aligned with federal compliance frameworks and Zero Trust initiatives. This individual will work closely with infrastructure, application, integration, and DevSecOps teams to ensure modernization efforts are designed and deployed with security at the forefront. What You’ll Do: • Support cybersecurity engineering for the pilot, including cloud security, RMF/ATO support, compliance documentation, and continuous monitoring. • Secure AWS-based environments through identity and access management, encryption, logging, monitoring, network security, vulnerability management, and configuration hardening. • Configure, monitor, and support AWS security services such as AWS Network Firewall, Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, and related capabilities. • Support security planning for an AWS Commercial Cloud environment with consideration for future migration to AWS GovCloud or another VA-approved hosting environment. • Assist with ATO planning, control implementation, evidence collection, compliance reporting, and approval workflows. • Work within eMASS, ServiceNow GRC, or similar risk management systems to support ATO artifacts, information assurance tasking, POA&M tracking, and security documentation. • Develop and maintain SSPs, POA&Ms, SOPs, risk assessments, control n

About the team The Applied AI Engineering team is responsible for helping developers and enterprises safely and effectively deploy OpenAI technologies in production. We act as trusted technical advisors and thought partners for customers, working side by side with their teams to identify high-value use cases, design practical architectures, and move from prototype to durable deployment. Cybersecurity is one of the most urgent domains where AI can help. Security teams are under pressure to reason across code, logs, infrastructure, tickets, alerts, and vulnerability data faster than ever. As frontier models become more capable, organizations need deep technical guidance on how to evaluate, validate, and safely deploy AI systems in security-critical workflows. About the role We are looking for a Cybersecurity Applied AI Engineer to partner with customers and help them apply OpenAI models, APIs, Codex, and agentic workflows to real cybersecurity use cases. You will work with CISOs, security executives, application security leaders, SOC teams, security engineering teams, and hands-on practitioners to identify where AI can create measurable security outcomes. This is a customer-facing technical role for someone who can move fluidly between executive strategy, practitioner-level cyber depth, and hands-on solution design. You will help customers evaluate and deploy workflows such as secure code review, vulnerability triage, threat modeling, remediation, SOC and incident response workflows, detection engineering, cloud security, GRC automation, and security validation. You will collaborate closely with Sales, Solutions Engineering, Product, Engineering, Research, and Security to turn customer needs into safe deployment patterns, reusable field assets, and product feedback. This role is based in our San Francisco HQ. We offer relocation support to new employees. In this role, you will: Deeply embed with strategic customers as the technical lead for AI-enabled cybersecurity wo

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Risk team is responsible for how Anthropic identifies, prioritizes, and drives treatment of its most important security risks. We are rebuilding risk management to operate as an engineering function through automation and AI-native platforms to enable decision making. The systems we assess span Anthropic’s full security landscape, from authorization primitives to cryptographic foundations, so the team needs breadth across domains and the ability to go deep in any of them. Security Risk, in deep partnership with Security Engineering, will help define the security program to shape how both engineers and non-engineers build and ship software. The conventional GRC playbook was not built for a company shipping frontier AI. You will help define what replaces it, with a direct line to CISO-level decisions and the mandate to build the AI-native platform underneath. You’ll work across a breadth of areas from identity and secrets management to infrastructure security, with your focus shaped by your strengths, ability to learn quickly, and the team’s priorities. This is largely greenfield work, and you will help define the architecture and discipline. Key responsibilities Take ownership of Anthropic’s most complex security risk problems and drive them end to end with minimal oversight, turning ambiguous signals into a defensible view of severity and likelihood and seeing them through escalation, treatment decisions, and remediation Build the systems that make risk measurable and let risk work scale, including quantification tooling, automated intake and triage, and the observability that partner teams use to understan

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's GRC team helps build and maintain trust with our users, regulators, business partners, and the organizations that rely on Figma every day. We partner across the company to strengthen security, manage risk, maintain compliance, and scale the programs that support our continued growth. We're growing our team and looking for security, risk, and compliance professionals across several disciplines. Whether your expertise is in compliance, risk management, governance, GRC tooling, or customer trust, you'll have the opportunity to build programs, improve processes, and help shape how Figma scales security and trust. Roles we hire for on this team: Compliance Management Lead compliance and certification programs across security and regulatory frameworks Manage audit cycles, partner with external assessors, and drive audit readiness initiatives Improve controls, processes, and evidence management practices across the organization <s

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Security team is growing, and we're looking for a Security Operations Manager to lead the strategy and execution of our security operations program. In this role, you'll build and scale the systems, processes, and tooling that help protect Figma and our community. You'll partner closely with Security Engineering, Platform Security, IT, GRC, and Legal to strengthen our detection and response capabilities, improve operational resilience, and help shape the future of our DART and SOC functions. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Own Figma's security monitoring and incident response program, from detection engineering through post-incident review and continuous improvement Build and automate security operations workflows, including alert triage, enrichment, investigation, and response actions using SOAR and custom tooling Develop and maintain incident response run books, escalation procedures, and communication plans for security events of varying severity Lead incident response preparedness initiatives, including tabletop exercises, red team engagements, and response capability assessments Improve the effectiveness of our SIEM and SOAR platforms by reducing noise, increasing signal fidelity, and closing detection coverage gaps Build and operationalize threat intelligence capabilities to identify adversary behaviors, prioritize investments, and strengthen detection and response programs Partner wi

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Affirm values security as being critical to the company’s continued success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. The Security Risk Management team is evolving beyond traditional governance, risk, and compliance; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect Affirm and our customers. The ideal candidate will design, develop, configure, and implement solutions to complex technical and business problems across the Security Third Party Program and the broader Security Risk Management program. They are equally comfortable shaping policy and shipping automation using modern tooling (Python, Cursor, Claude, and other agentic coding platforms) to replace manual GRC work with scalable, code-defined workflows. They will operate as a subject matter expert, interface with business and engineering stakeholders, and play a key role in transforming Security Risk Management from a compliance oriented function into a security engineering discipline. What You'll Do Lead and mature Affirm's Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflows Build and maintain automation that replaces manual GRC tasks: intake, triage, evidence collection, control validation, tracking, escalations, and reporting, using either Python, low code platforms, and agentic coding tools (Cursor, Claude, etc.) Design and operate workflow orchestration and integrations across systems like ticketing, GRC platforms, vendor management tools, identity providers, and cloud control planes Partner closely with Procurement, Legal, Engineering, IT, Compliance, Privacy, and bus

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. We’re looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.You’ll join Corporate Security Engineering within Gong’s Cyber Defense organization, You’ll design, implement, and mature the security controls that protect Gong’s business applications, workforce, and corporate environment. You’ll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation. You’ll Own The security posture of Gong’s corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security. Z

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Security Software Engineer for Infrastructure Security you will be a part of the Information Security organization and report to the Senior Manager of Infrastructure Security. You will help shape the future of Platform Security at Roblox. We work closely with Production IAM, Network Security, and Cloud Security at Roblox. You Will: Identify security gaps and threats in our cloud and on premise infrastructure, partnering with Governance Risk and Compliance teams to create standards and policies along the way. This will help Roblox meet regulatory and compliance requirements. Harden our infrastructure by introducing secure by default configurations, designs and guardrails for all developers at Roblox. Own and drive solutions that enable Roblox engineers to design, build, and use infrastructure securely at scale. Work closely with other InfoSec teams (AppSec, D&R, GRC, CorpSec, CloudSec, NetSec) and partner with engineering teams across Roblox, specifically the Infrastructure organization, to ensure the secure outcomes of security and product driven initiatives. You Have: 5+ years of experience writing code and/or relevant technical experience. Experience with

Who Are We? Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman. P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman. About the Team The Information Security organization at Postman operates across three pillars: Governance Risk & Compliance (GRC), Product Security, and Security Operations. We are a team of builders, not checkbox-checkers. We hold active SOC 2 Type II, ISO 27001, ISO 42001, and HIPAA compliance postures, and we are pursuing FedRAMP High and CMMC Level 2 authorization. Our security stack includes Wiz, SentinelOne, Okta, Jamf, and 1Password, and we operate across a multi-cloud environment. The Offensive Security team is the "red" pulse of this organization. We don't just find bugs — we simulate the adversary to ensure our defenses hold up under real-world pressure. We focus on continuous security validation, AI-augmented adversary emulation, and offensive AI security research at Postman's scale. The Opportunity We are looking for a Principal Offensive Security Engineer who is as much a strategist as they are a hacker. You will own the strategic direction of Postman's offensive security program — including building out a dedicated Offensive AI Security capability from the ground up — and operat

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As Vanta's Customer Success Manager, Strategic, you will serve as a trusted advisor to Vanta's largest and most complex customers—organizations with 10,000+ employees navigating sophisticated security and compliance landscapes. Unlike traditional CSM roles managing 20-30 accounts, you'll own a focused book of 5-10 strategic accounts, driving deep customer relationships, multi-quarter projects, and high-impact business outcomes. The Strategic CS team plays a defining role in proving Vanta can serve the enterprise at scale. You'll partner closely with Strategic Account Executives and Account Managers to execute land and expand strategies, manage complex implementations, and guide executive stakeholders through their GRC program maturity journeys. Your work will directly influence Vanta's upmarket growth, product roadmap, and strategic positioning in the market. What you’ll do as a Customer Success Manager, Strategic at Vanta: Serve as the primary trusted advisor for 5-10 of Vanta's most strategic customers, each with 10,000+ employees and highly complex organizational structures Lead enterprise-scale implementations, configurations, and optimizations of Vanta's Trust Management Platform across multi-business-unit, multi-geography organizations Build and maintain deep, multi-threaded executive relationships with CISOs, CIOs, Chief Compliance Officers, and other C-level stakeholders Partner closely with Strategic Account Executives and Account Managers to identify expansion opportunities, develop account growth strategies, and execute on land and expand motions Manage complex, multi-quarter projects that require coordination across

Here’s a summary of the role: You are a seasoned AI engineer ready to design, ship, and own production‑grade agentic systems that solve real enterprise problems. At Diligent, you’ll take technical ownership of Compliance in a Box (CiaB) — a flagship AI platform reshaping how organisations manage governance, risk, and compliance at scale. You’ll architect and evolve the AI reasoning layer and agent orchestration framework at the heart of the product, shaping how multiple intelligent agents collaborate, reason, and operate safely in high‑stakes, regulated environments. This is hands‑on, deeply technical work — from system design to prompt strategy to evaluation — not research theatre. Partnering closely with product, security, and platform teams, you’ll make high‑impact decisions, move quickly, and see your work land in production fast. If you’re motivated by ownership, technical depth, and building AI systems that actually matter , this is your chance to set the standard for enterprise‑ready agentic AI. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Build and maintain the GRC Brain (AI reasoning layer) and Agentic Cortex (agent orchestration framework) — the technical core of our Compliance in a Box product Design and implement a 7-agent architecture : OnboardingAgent, ScopeAgent, StandardsMapper, RiskQuantifier, PolicyAnalyzer, InfrastructureAuditor, and ComplianceMonitor Implement Human-in-the-Loop (HITL) gates across agent workflows, and tune prompts and confidence scoring for Bedrock-hosted models Own the agent evaluation framework — measuring quality, latency, and reliability to keep CiaB performant and production-ready Collaborate with cross-functional teams to deliver CiaB feature-complete by Week 7 — your work ships fast and your impact is visible from day one These are the essentials you’ll need to get an interview: A degree in Computer Science, Software Engineering, or a related IT discipline Demonstrable understandin

Sigma Computing is seeking an experienced employment counsel to provide legal guidance on all aspects of employment law across the organization. This role will partner closely with People Operations, leadership, and business teams to manage risk, ensure compliance, and support a positive employee experience in a fast-paced, high-growth technology environment. Key Responsibilities Provide legal advice on employment-related matters including onboarding, performance management, disciplinary actions, terminations, and reductions in force; Ensure compliance with federal, state, and local employment laws and regulations (U.S. and, if applicable, international); Draft, review, and update employment agreements, offer letters, contractor agreements, policies, and handbooks; Advise on employee relations issues and dispute resolution; Manage and oversee outside employment counsel and litigation matters; Complete workplace investigations; Partner with People Ops (HR) and Governance, Risk, & Compliance (GRC) teams on compliance training, and policy implementation; Monitor changes in employment law and proactively recommend updates to company practices; Support M&A, due diligence, and integration efforts related to employment matters as needed. Qualifications Juris Doctor (JD) from an accredited law school; Active license to practice law in at least one U.S. jurisdiction; 5+ years of experience practicing employment law (in-house experience at a technology or SaaS company preferred); Workplace investigation training and experience; Strong knowledge of U.S. employment laws (FLSA, ADA, FMLA, Title VII, wage & hour, classification, etc.); Ability to provide practical, business-oriented legal advice is essential; Workplace investigation training and experience; Experience working closely with HR/People teams and senior leadership; and Excellent communication, judgment, and stakeholder management skills. Preferred Qualifications Experience s