Governance, Risk, and Compliance Audit Analyst

Summary

Join MeridianLink as a GRC Analyst, Professional Level 2, and play a vital role in safeguarding our company's and our clients' data. This role involves managing information security policies, processes, and toolsets; conducting vendor risk management; performing audits; and ensuring compliance with internal policies and external regulations. You will lead risk assessments, develop risk mitigation strategies, and collaborate with cross-functional teams. The position requires strong communication skills to address client and vendor inquiries regarding compliance. As a fast-growing SaaS startup, we offer a dynamic environment where you can build and lead day-to-day security and privacy compliance functions. This role offers a chance to make a significant impact on our security posture.

Requirements

• Ability to determine a course of action based on guidelines and adapt processes and methods as required
• Exercise judgment within defined procedures and practices to determine appropriate actions
• Build productive internal and external working relationships to resolve mutual problems through collaboration
• Bachelor’s degree and 2-4 years of related experience or equivalent work experience

Responsibilities

• Lead auditors through evidence collection and observations
• Be responsible for customer satisfaction with compliance responses
• Lead risk remediation methods and identification tactics
• Work with cross-functional teams to build and operate controls and processes that satisfy an array of security and privacy-related regulatory requirements
• Facilitate risk assessments, maintain a risk register, and proactively communicate risk with management
• Lead the response to customer security questionnaires, RFPs, and inquiries about our Security & Compliance program

Benefits

• Stock options or other equity-based awards
• Insurance coverage (medical, dental, vision, life, and disability)
• Flexible paid time off
• Paid holidays
• 401(k) plan with company match
• Remote work