GRC Analyst - Vercel

About Vercel

Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. As the team behind Next.js, v0, and AI SDK, we create products that help builders move from idea to production with speed, security, and exceptional developer experience.

About the Role

We are looking for a GRC Analyst to join our Governance, Risk & Compliance team. You will manage and maintain ongoing compliance with security and privacy frameworks, policies, and commercial assessments, including ISO 27001, SOC 2, HIPAA, and PCI DSS. You will report to the Head of GRC and collaborate with cross-functional teams to promote a culture of accountability and integrity.

Note: This role requires in-office anchor days on Monday, Tuesday, and Friday if you are within commuting distance of our offices.

What You Will Do

• Collaborate with internal teams to maintain effective internal controls and drive remediation efforts.
• Build strong working relationships across the business to ensure compliance accountability.
• Streamline annual audits by managing deliverables, developing treatment plans, and coordinating across teams.
• Monitor and improve controls, processes, and evidence management practices, identifying opportunities for automation.
• Enable go-to-market teams by supporting security questionnaires and maintaining customer-facing compliance documentation.
• Design and manage company training to enhance visibility on compliance, ethics, and regulatory requirements.

About You

• At least 3 years of experience supporting the audit lifecycle in a cloud-centric environment (SOC 2, ISO 27001, PCI, HIPAA).
• Experience collaborating with internal partners to incorporate policies and technical controls into the SDLC.
• Strong project management skills with the ability to execute projects across various business units.

Bonus Points

• Experience with cloud infrastructure (e.g., Azure, AWS).
• Familiarity with compliance or software development tools (e.g., Drata, Linear, Datadog).
• Experience with frontend development and open source components.
• Relevant industry certifications (CISM, CISSP, CCEP).

Benefits

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Mentorship and professional development opportunities.
• Flexible Time Off.
• Gear and WFH budget to outfit your workspace.