> Markdown version of [/jobs/ext/1701559-grc-analyst-ii](https://www.wearedevelopers.com/jobs/ext/1701559-grc-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst II - **Company:** PayScale Inc. - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $81,000.0 - $121,000.0 - **Contract:** Permanent contract - **Skills:** Software as a Service, Cyber Security, Information Systems, Data Governance, Smartsuite, Data Classification, Software Version Control, Servicenow - **Published:** July 16, 2026 - **Apply:** https://jobs.ashbyhq.com/Payscale/a48e5e6b-0211-4970-804b-701a1a59bc62 ## About the Role * Bachelor's degree in cybersecurity, information systems, or a related field * 2-4 years of work experience in GRC, information security, or a related field within a commercial SaaS or software company * Working knowledge of information security control frameworks such as SOC 2, ISO 27001, NIST 800-53, or CIS * Demonstrated experience with data classification frameworks and data governance concepts * Experience conducting vendor security assessments and managing third-party risk workflows * Hands-on experience with audit support activities, including evidence collection for SOC 2 or similar frameworks * Solid understanding of information security policies, standards, and procedures * Hands-on experience with GRC tools or platforms (e.g., Drata, ServiceNow GRC, or similar) * Strong written and verbal communication skills with the ability to engage both technical and non-technical stakeholders * Ability to manage multiple workstreams independently, prioritize effectively, and meet deadlines. ## Description Payscale is looking for a GRC Analyst II to join our Information Security Team, reporting to the Manager of GRC. In this role, you will take on broader ownership of core GRC program areas while supporting senior-level initiatives across risk, audit, and compliance. The ideal candidate brings hands-on GRC experience, strong communication skills, and the ability to operate independently across technical and business stakeholders to drive compliance and risk outcomes. What You'll Do * Maintain Payscale's data classification program, including classification schema, tagging standards, and coordination with data owners to ensure accurate and consistent classification across systems and assets * Maintain the system classification and ownership inventory, partnering with teams to ensure systems are properly classified, attributed, and reviewed on a defined cadence * Support audit coordination activities for SOC 2 and other compliance frameworks. * Conduct vendor security assessments reviews. * Manage the policy management lifecycle, including drafting new policies and standards, tracking review cycles, coordinating approvals, and maintaining version control. * Identify control gaps or process improvement opportunities and partner with business units to implement and sustain effective controls. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready) ## Related Articles - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany) - [How Much Does a Software Engineer Make? Realistic Software Engineering Salaries](https://www.wearedevelopers.com/magazine/425-how-much-does-a-software-engineer-make-realistic-software-engineering-salaries)