> Markdown version of [/jobs/ext/2704336-grc-analyst](https://www.wearedevelopers.com/jobs/ext/2704336-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** Ivo Inc. - **Location:** San Francisco, CA, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cyber Security, Information Technology Audit, Automation of Marketing, Cloud Platform System - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/governance-risk-compliance-grc-analyst-ivo-inc-8342748 ## About the Role * 3-5 years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, or related field. * Hands-on experience supporting SOC 2 Type II, ISO 27001, CSA STAR, and in-depth knowledge of ISO/IEC 42001. * Experience administering or working extensively with Vanta or similar GRC/compliance automation platforms. * Experience managing and maintaining a customer-facing Trust Center, including security documentation, compliance artifacts, sub-processor disclosures, and customer assurance materials. * Strong understanding of information security principles and common security controls. * Experience with audits, evidence management, and customer security reviews. * Excellent written and verbal communication skills., * Experience working at a SaaS or AI company. * Familiarity with GDPR, CCPA, privacy regulations, and third-party risk management. * Knowledge of cloud environments such as GCP, AWS, or Azure. * Relevant certifications such as Security+, CISA, CRISC, CCSK, or ISO 27001 Lead Implementer/Auditor., * Would describe yourself as being relentlessly resourceful. * You have a strong internal sense of urgency. You have a bias towards doing things today, rather than tomorrow. * Experience working in a startup environment is preferred but not required. * Are excited about the adventure of building a company! ## Description Ivo is seeking a detail-oriented and proactive GRC Analyst to support the company's compliance, risk management, and security assurance initiatives. This role will play a key part in maintaining and enhancing Ivo's compliance programs, including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001. The ideal candidate has experience supporting security audits, managing evidence collection, conducting risk assessments, maintaining policies and procedures, and partnering cross-functionally with engineering, IT, legal, HR, and business stakeholders. This is a fully onsite role based out of Ivo's San Francisco headquarters to support close cross-functional collaboration with Security, Engineering, IT, and Operations teams., * Support and coordinate Ivo's compliance programs including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001. * Assist with annual audits, surveillance audits, and customer security assessments. * Coordinate evidence collection and maintain audit readiness across teams. * Support and maintain Ivo's Vanta GRC platform and associated compliance workflows. * Monitor automated compliance evidence collection and control monitoring within Vanta. * Perform vendor and third-party risk assessments. * Support enterprise risk management and risk register maintenance. * Maintain and update security policies, standards, and procedures. * Support AI governance and responsible AI compliance initiatives. ## Related Videos - [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Hiring AI Native Talents](https://www.wearedevelopers.com/videos/100268-hiring-ai-native-talents) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)