compyl - Senior GRC Analyst
Requirements
• 5+ years of experience as a GRC analyst, consultant, or coordinator — in-house, at a consulting firm, or in a similar capacity. • Direct, hands-on experience with audits, risk assessments and risk registers, and policy rollouts — you've been in the room, not just read about it. • Working familiarity with common frameworks (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, or similar) — deep specialization isn't required, but you should be able to orient quickly in any of them. • An instinct for GRC complexity: you can tell when something is more nuanced than it first appears, and you know how to break it down for someone who's stuck. • Strong consultative communication skills — you can explain a compliance concept to a nontechnical stakeholder without losing the substance. • A genuine interest in helping customers solve problems, not just closing tickets. • Certifications such as CISA, CRISC, CGRC, or ISO 27001 Lead Implementer/Auditor. • Experience working directly with a GRC software platform (as a practitioner, implementer, or vendor-side consultant). • Exposure to multiple industries or company sizes, giving you a broader sense of how GRC programs vary in practice.
Responsibilities
• Serve as a hands-on GRC advisor for a portfolio of customers, guiding them through risk assessments, risk registers, audit preparation, and control rollouts. • Help customers prepare for and navigate audits (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST, and similar frameworks), translating requirements into practical next steps. • Advise on policy development and control design tailored to each customer's risk profile and maturity level — not just “what the framework says,” but what actually makes sense for them. • Spot GRC complexity early — recognizing when a customer's question touches on risk, compliance, or audit nuance that needs more than a standard playbook answer. • Partner closely with Support and Customer Success to own the escalations that require real GRC expertise, not just product knowledge. • Turn recurring customer questions into scalable guidance — playbooks, internal knowledge base content, and best-practice frameworks the whole team can use. • Act as the voice of the customer internally, flagging where our platform could better support real-world GRC workflows.
Benefits
• Competitive salary and meaningful equity participation at a Series A inflection point. Comprehensive paid benefits, including health insurance, 401(k), and generous leave policies. • Category-defining market: GRC and automated compliance is one of the fastest-growing segments in enterprise software. The tailwinds are structural, not cyclical. • Real product, real traction: Healthy customer growth, a platform built by practitioners who understand the buyer. • Series A momentum: Backed by Venture Guides, Contour Venture Partners, and Armory Square Ventures, with the capital and conviction to scale aggressively. • Autonomy, no bureaucracy: No micromanagement. You're trusted as the expert and given room to build the function your way. • Meaningful equity: Significant equity participation at a valuation inflection point. • EQUAL OPPORTUNITY
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT