Grc Analyst Jobs

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet's customers in Europe, the Middle East, and Africa expect our Customer Trust team to understand their compliance challenges, speak their language, and respond quickly to security assessments. We're looking for a Sr. Security Engineer I to lead Customer Trust operations across EMEA—responding to security questionnaires, managing vendor risk assessments, and building trusted relationships with enterprise customers in these regions. You will be responsible for questionnaire triage, completion, and queue management for EMEA customers. You'll work closely with EMEA sales teams, understand regional compliance requirements (GDPR, EU data protection, sector-specific frameworks), and ensure Smartsheet maintains a strong reputation for responsiveness and technical credibility in these high-value markets. You will work remotely from the UK and report to our Sr. Director, GRC Engineering, based in the US You Have 5+ years of experience in customer trust, vendor risk management, security assessment, or customer-facing security roles at SaaS or cloud platform companies. Proven experience completing and responding to customer security questionnaires, vendor assessments, and RFIs. Strong understanding of GDPR, EU data protection, and regional compliance requirements: Familiarity with data residency, data processing agreements, DPIAs, and how cloud services operate within EU regulatory frameworks. Knowledge of GRC frameworks: Working knowledge of SOC 2, ISO 27001, and compliance standards commonly referenced in EMEA asse

Position Overview Diligent is looking for an experienced GRC Advisor to join the team and work on Key accounts to drive adoption and retention and identify areas for expansion within our platform. This position will leverage our GTM, and value drivers established through combining people, process, and technology. If you are anything like the talented GRC Advisors at Diligent then this feeling you have, might be the desire to serve others- but you are blinded by the limits placed on you in your current role. The Client Success Advisor role is key to Diligent’s Customer Success retention strategy. Key Responsibilities Provide guidance and best practices on configuring, customizing, and optimizing the functionality of the GRC platform and modules to align with clients’ business processes and objectives. Conduct in-depth assessments of clients’ GRC requirements, objectives, and challenges to recommend tailored solutions to address their business needs and goals. Collaborate with clients on internal roadmaps, governance, risk, and compliance requirements to be implemented within Diligent’s platform. Ensure proper understanding and adoption of the platform solutions to identify at-risk clients and help increase usage of the software and modules. Partner closely with internal Product, Customer Success, Support, and Sales teams to drive continuous improvement of the platform based on client use cases. Monitor industry trends, regulatory developments, and emerging best practices in the GRC landscape to proactively share insights and recommendations with clients from a subject matter expert perspective. Required Experience/Skills Minimum of 5-7 years of experience in a client-facing role within the legal, compliance, and entity management or subsidiary governance industry. Adaptive mindset and ability to drive out a meaningful path to how our customers see tangible business value. Ability to build relationships both internally and externally to understand the underpinni

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As one of Vanta’s GTM-facing GRC Subject Matter Experts, you will be a highly visible, customer-facing leader within Vanta’s Security team, responsible for representing Vanta’s Trust Management Platform to prospects and customers, as well as having a role in collaborating with internal teams to help drive and implement new features in the product. This role is specifically involved with Vanta's pre-sales and marketing motions, owning GRC conversations for net-new prospects and the expansion of existing customers' use of the Vanta product, as well as supporting marketing efforts by representing Vanta in public-facing conversations and speaking engagements. If this sounds like you, and you're excited to use your Security, Privacy, and broader GRC experience to help grow and sell our product, we'd love to hear from you. Candidates must be based in Pacific, Mountain, or Central time zones for this role. What you’ll do as a Governance, Risk, and Compliance Expert, GTM at Vanta: Partner with Vanta's Sales, Account Management, and Solutions Engineering teams and own GRC-focused discussions & activities, representing Vanta’s Trust Management Platform to prospects/customers. Become an expert in Vanta’s product features to translate how they can help optimize prospect/customer GRC workflows. Engage with executives and senior staff at prospect and customer organizations to establish relationships with customer security, privacy, and AI teams. Answer questions from internal and external stakeholders on GRC programs, including program foundation/scaling strategies, framework-specific requirements, third-party risk management, and broade

Agents have changed the game for software delivery and efficacy. Diligent is the leading GRC platform in the world, and we are racing ahead to take the agents show on the road and work with the customers where they work . The FDE function will lead the change on how we embed AI agents into some of the world’s most complex governance, risk and compliance environments. This is not a support or consultancy role. It is a builder role, for someone who is equally comfortable reading a failing agent trace, running a discovery workshop with a bank’s internal audit team, and translating what they find into a production-grade agentic solution. You will be building AI agents for GRC professionals , not assistants that surface suggestions, but agents that own complex, multi-step workflows end to end . Agents that customers can hand a task to and trust it will come back done. Closing the gap between a promising prototype and something a company Board and ELT depends on is a completely . Here’s a breakdown of what you’ll do Embed directly with major enterprise customers (global banks, regulated corporates) across EU and US ; sitting wi th internal audit teams, risk functions, compliance and governance professionals to understand their real workflows and devise agentic solutions to intelligently automate them creating tremendous efficacy and efficiencies for our customers. Run agent-focused discovery workshops, rapidly prototype agentic solutions, and test them with practitioners; distinguishing between workflows that need an agent and those that need a button. Source, integrate, and move data between enterprise systems as part of live customer implementations — understanding the real data landscape customers operate in and building reliable pipelines to support it . Take agents from prototype t

Position Overview: As a Technical Solutions Engineer at Diligent, you will play a critical role in supporting complex and enterprise pre-sales engagements by designing, prototyping, and demonstrating tailored GRC solutions. You will partner closely with Sales, Customer Success, Product, and Professional Services to translate sophisticated customer requirements into compelling technical solutions that accelerate deal velocity and drive technical wins. This role is ideal for someone who enjoys hands-on technical work, customer-facing problem solving, and building prototypes and automations that showcase how modern GRC platforms integrate into enterprise ecosystems. This role operates on a hybrid model, with 50% office-based work required and is open to candidates based in London. Regrettably we are unable to provide visa sponsorship, so you must be eligible to work in the UK. Key Responsibilities Pre-Sales Technical Execution Partner with Sales, and other members of the Solutions team to support mid-market and enterprise GRC opportunities Own the technical pre-sales win for assigned deals, including solution validation, design, and risk mitigation Design and deliver tailored demos, technical deep dives, and proof-of-concepts (POCs) Solution Prototyping & Automation Build demo prototypes, automation scripts, and integration examples using languages such as Python Develop solutions and workflows to demonstrate: o Data ingestion and transformation o API-based integrations o Process automation and orchestration Leverage REST APIs to integrate Diligent with third-party enterprise systems Expert at using AI and applying it to solution delivery Technical Storytelling Translate complex GRC use cases into clear, value-driven technical narratives Prepare demo assets, technical diagrams, and supporting materials for customer e

Position Overview Diligent is looking for an experienced GRC Advisor to join the team and work on Key accounts to drive adoption and retention and identify areas for expansion within our platform. This position will leverage our GTM, and value drivers established through combining people, process, and technology. If you are anything like the talented GRC Advisors at Diligent then this feeling you have, might be the desire to serve others- but you are blinded by the limits placed on you in your current role. The Client Success Advisor role is key to Diligent’s Customer Success retention strategy. Key Responsibilities Provide guidance and best practices on configuring, customizing, and optimizing the functionality of the GRC platform and modules to align with clients’ business processes and objectives. Conduct in-depth assessments of clients’ GRC requirements, objectives, and challenges to recommend tailored solutions to address their business needs and goals. Collaborate with clients on internal roadmaps, governance, risk, and compliance requirements to be implemented within Diligent’s platform. Ensure proper understanding and adoption of the platform solutions to identify at-risk clients and help increase usage of the software and modules. Partner closely with internal Product, Customer Success, Support, and Sales teams to drive continuous improvement of the platform based on client use cases. Monitor industry trends, regulatory developments, and emerging best practices in the GRC landscape to proactively share insights and recommendations with clients from a subject matter expert perspective. Required Experience/Skills Minimum of 5-7 years of experience in a client-facing role within the legal, audit, risk, or compliance industry. Adaptive mindset and ability to drive out a meaningful path to how our customers see tangible business

Position Overview As a Solutions Engineer at Diligent, you will partner closely with Sales to help organizations understand how our platform can transform the way they identify and mitigate risk, perform audits, strengthen controls, and operationalize broader GRC programs. You’ll independently lead the SE workstream on small to mid-sized opportunities, while partnering with more senior Solutions Engineers on complex, multi-pillar deals, acting as a trusted partner to customer stakeholders and helping translate Risk & Audit and broader GRC challenges into clear, compelling solutions that drive business value. If you enjoy combining domain expertise, storytelling, solution design, and customer interaction and are looking to build your career in a commercial, customer-facing environment, this is a strong next step. Key Responsibilities Customer & Commercial Partnership Partner with Sales to lead the full pre-sales lifecycle for small to mid-sized opportunities, helping customers understand how Diligent solves real-world risk, audit, and control management challenges. Deliver independent, well-prepared, tailored software demonstrations that clearly articulate business value, while seeking coaching and feedback from senior team members for continuous improvement. Engage confidently with stakeholders across Internal Audit, Risk, Compliance, IT, Controls, and Governance teams, owning day-to-day customer conversations and escalating to senior SEs for high-risk or complex topics as needed. Translate customer pain points into clear solution narratives, including outcomes and success criteria, to support deal progression and closure. Own the technical win for small to mid-sized opportunities, and contribute to the technical strategy on larger, multi-stakeholder deals in partnership with senior SEs. Solution Design & Thought Leadership Design and present solu

Position Overview As a Solutions Engineer at Diligent, you will partner closely with Sales to help organizations understand how our platform can transform the way they identify and mitigate risk, perform audits, strengthen controls, and operationalize broader GRC programs. You’ll independently lead the SE workstream on small to mid-sized opportunities, while partnering with more senior Solutions Engineers on complex, multi-pillar deals, acting as a trusted partner to customer stakeholders and helping translate Risk & Audit and broader GRC challenges into clear, compelling solutions that drive business value. If you enjoy combining domain expertise, storytelling, solution design, and customer interaction and are looking to build your career in a commercial, customer-facing environment, this is a strong next step. Key Responsibilities Customer & Commercial Partnership Partner with Sales to lead the full pre-sales lifecycle for small to mid-sized opportunities, helping customers understand how Diligent solves real-world risk, audit, and control management challenges. Deliver independent, well-prepared, tailored software demonstrations that clearly articulate business value, while seeking coaching and feedback from senior team members for continuous improvement. Engage confidently with stakeholders across Internal Audit, Risk, Compliance, IT, Controls, and Governance teams, owning day-to-day customer conversations and escalating to senior SEs for high-risk or complex topics as needed. Translate customer pain points into clear solution narratives, including outcomes and success criteria, to support deal progression and closure. Own the technical win for small to mid-sized opportunities, and contribute to the technical strategy on larger, multi-stakeholder deals in partnership with senior SEs. Solution Design & Thought Leadership Design and present solu

Here’s a summary of the role: In this role, you will shape the future of governance, risk, and compliance by leading engineering teams to build the next generation of GRC products that turn compliance from a reactive obligation into a strategic engine for resilience, innovation, and value creation. You will use your technical leadership to drive technical strategy for AI-first, data-driven, and integrated GRC platforms that predict risks, orchestrate intelligent workflows, and provide real-time visibility across cyber, ESG, and operational domains. Drawing on your passion for leveraging AI and automation tools, you will partner closely with product and risk leaders to design agentic and generative AI capabilities that make complex regulatory landscapes manageable and keep organizations both compliant and resilient in a rapidly changing world. At the same time, you’ll be coaching engineers to grow as architects, innovators, and owners - creating a culture where modern engineering practices, ethical governance, and human-centered decision-making are at the heart of every solution you deliver. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Lead and grow multiple agile engineering teams, fostering collaboration, accountability, and an inclusive, high-performing culture. Define and own the technical roadmap with stakeholders, ensuring timely delivery of scalable, maintainable solutions. Champion responsible use of AI and automation, integrating models, APIs, and AI-assisted tools to boost efficiency and product capabilities. Align technical strategy with business goals, representing engineering in cross-functional initiatives and promoting a transparent, impact-driven culture. Mentor and coach engineers at all levels, driving continuous learning, feedback, and career development. These are the essentials you’ll need to get an interview: 12+ years of total softw

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

Location: Athens, Gr Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? 🤔 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: 👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. 👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. 👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. 👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. 👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? 🧳 You'll need to be able to demonstrate the core skills this role requires. You don't have

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: We are looking to hire an individual that will own the identification, assessment, documentation and monitoring of digital and information security risks across WPP, ensuring risks are clearly articulated, consistently assessed and effectively tracked. What you'll be doing Risk Assessment & Management Conduct enterprise and operational security risk assessments. Ensure risk statements, impact and likelihood justifications are clear and defensible. Maintain accurate and current risk records within approved GRC tooling. Risk Management Conduct organisational-level, third-party or product risk assessments to identify technical, process and/or procedural vulnerabilities and recommend mitigation strategies. Support the implementation of WPP’s Digital Security risk management framework, ensuring alignment with organisational goals. Monitor and report on Key Risk Indicators (KRIs) to provide insights into WPP’s cybersecurity posture. Risk Treatment & Monitoring Support risk owners in defining proportionate mitigation actions. Track remediation progress and reassess residual risk. Es

Position Overview Diligent is looking for an experienced GRC Advisor to join the team and work on Key accounts to drive adoption and retention and identify areas for expansion within our platform. This position will leverage our GTM, and value drivers established through combining people, process, and technology. If you are anything like the talented GRC Advisors at Diligent then this feeling you have, might be the desire to serve others- but you are blinded by the limits placed on you in your current role. The Client Success Advisor role is key to Diligent’s Customer Success retention strategy. Key Responsibilities Provide guidance and best practices on configuring, customizing, and optimizing the functionality of the GRC platform and modules to align with clients’ business processes and objectives. Conduct in-depth assessments of clients’ GRC requirements, objectives, and challenges to recommend tailored solutions to address their business needs and goals. Collaborate with clients on internal roadmaps, governance, risk, and compliance requirements to be implemented within Diligent’s platform. Ensure proper understanding and adoption of the platform solutions to identify at-risk clients and help increase usage of the software and modules. Partner closely with internal Product, Customer Success, Support, and Sales teams to drive continuous improvement of the platform based on client use cases. Monitor industry trends, regulatory developments, and emerging best practices in the GRC landscape to proactively share insights and recommendations with clients from a subject matter expert perspective. Required Experience/Skills Minimum of 5-7 years of experience in a client-facing role within the legal, audit, risk, or compliance industry. Adaptive mindset and ability to drive out a meaningful path to how our customers see tangible business

Role Overview As a Security Risk and Compliance Lead you will play a hands-on role in maturing and operating Asana's compliance and certification programme—with a primary focus on FedRAMP Continuous Monitoring and authorization activities. This role sits at the intersection of traditional GRC work and compliance engineering: you will own our FedRAMP programme day-to-day, while also supporting our broader audit cycles and control frameworks across SOC 2 and ISO 27001. This is an excellent opportunity for someone with early-career GRC experience who has a strong grounding in FedRAMP and is excited to grow their technical skills in a high-growth SaaS environment. You will partner closely with Security Engineering, Legal, Privacy, and R&D to ensure our FedRAMP obligations are met with rigour, our controls are effective, and our certifications are maintained. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What You’ll Achieve FedRAMP Continuous Monitoring Own the monthly FedRAMP ConMon package submission, ensuring it is accurate, complete, and delivered on time every month. Track and drive completion of all timebound FedRAMP requirements by working closely with Engineering, People, and other responsible teams. Maintain a clear calendar of FedRAMP deliverables and proactively flag risks to timelines, escalating where needed to ensure nothing slips. Serve as the internal subject matter expert for FedRAMP, acting as the day-to-day point of contact for FedRAMP-related queries from internal teams and helping them understand their obligations and what good looks like. Proactively engage with a wide range of team

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic is growing fast, and our SOX program needs to keep up. Many of the controls that matter for financial reporting run on engineering systems: who can access production and financial systems, how code changes are reviewed and deployed, and how usage is metered and billed. We’re hiring a Technical Program Manager to own the technology side of our SOX program. You'll work across engineering, security, GRC, Finance, and Internal Audit to design and run IT controls, drive gaps to closure, and make compliance lighter for engineering teams. You’ll also use Claude to automate evidence collection and control testing, so the program scales without more manual work. Responsibilities Own the technology side of the SOX program end-to-end, from planning and control design through evidence, testing, remediation, and year-end reporting Work with engineering teams to design and roll out IT general controls and IT application controls Work with engineering teams to build Claude-based workflows, tools, and dashboards to automate evidence collection, control testing, and monitoring that warns engineering teams about compliance issues before an audit finds them Lead large SOX projects, such as bringing new systems into scope, with clear success criteria, dependencies, and delivery dates Turn control requirements into concrete engineering work with clear scope, owners, and deadlines, and a design that fits how our teams already build and ship Build processes to evaluate new products, systems, and major engineering changes for SOX impact before they ship, so the right controls are in place from the start Build strong working relations