> Markdown version of [/jobs/ext/3437897-analyst-grc](https://www.wearedevelopers.com/jobs/ext/3437897-analyst-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Analyst, GRC

- **Company:** Veterinary Emergency Group, LLC
- **Location:** White Plains, NY, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Information Technology Audit, PCI Data Security Standards
- **Published:** September 22, 2026
- **Apply:** https://www.thejobnetwork.com/job/06395748-003c-424d-9eb6-ff196ea25c46/senior-analyst-grc

## About the Role

* 3+ years in GRC, IT audit, compliance, or a related security function (or equivalent experience).
 * Working knowledge of at least one security or compliance framework (e.g., PCI DSS, NIST, SOC 2, or ISO 27001).
 * Hands-on experience with a GRC or governance platform (e.g., Hyperproof, Archer, or OneTrust), or the ability to pick one up quickly.
 * Strong documentation skills and a sharp eye for detail.
 * Clear written communication and the ability to follow through without reminders., * Empathetic, instinctively taking a people-centric approach, whether supporting your colleagues or making an effort to understand different perspectives
 * Have a sense of humility; acknowledging mistakes, sharing credit with others, and lifting up your team's' accomplishments
 * Feel a strong sense of ownership over your work, taking responsibility for outcomes and staying committed to achieving long-term, impactful results
 * Curious by nature; you ask insightful questions and continuously seek out opportunities to learn and grow your skills and knowledge

## Description

* Conduct third-party and AI tool risk assessments through our intake and triage process, and track remediation to closure.
 * Collect and maintain evidence for PCI DSS and privacy compliance, keeping us continuously audit-ready.
 * Document security controls, monitor their health, and support internal and external audits.
 * Update policies, standards, and baselines, and track exceptions.
 * Maintain the risk register and support quarterly risk reporting.
 * Partner with control owners across IT, Engineering, and Legal to keep compliance moving.


## Related Videos

- [Zero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations](https://www.wearedevelopers.com/videos/100394-zero-trust-architecture-for-agentic-ai-securing-multi-user-access-and-third-party-integrations)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Fireside Chat: AI and Sustainability - Thorsten Jonas](https://www.wearedevelopers.com/videos/1769-fireside-chat-ai-and-sustainability-thorsten-jonas)
- [AI is dead, long live AK](https://www.wearedevelopers.com/videos/1093-ai-is-dead-long-live-ak)
- [Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities](https://www.wearedevelopers.com/videos/100426-secure-by-inclusion-preventing-accessibility-barriers-from-becoming-security-vulnerabilities)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship)
- [Velocity with Guardrails: How Technical Teams Can Move Fast Without Losing Decision Integrity](https://www.wearedevelopers.com/magazine/747-velocity-with-guardrails-how-technical-teams-can-move-fast-without-losing-decision-integrity)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)