> Markdown version of [/jobs/ext/3711831-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3711831-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst

- **Company:** Franklin Fitch
- **Location:** New York, NY, United States
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Identity and Access Management, Google Cloud, Kubernetes
- **Published:** October 13, 2026
- **Apply:** https://www.juju.com/job/2_163279718

## About the Role

* Experience supporting customer-facing security, compliance or trust functions at a SaaS or cloud-native company
 * The ability to translate technical security concepts into clear, concise written responses
 * An understanding of enterprise security expectations across cloud infrastructure, access control, data protection and incident response
 * Strong attention to detail, and the ability to run multiple parallel requests without dropping quality
 * Sound judgment on sensitive or ambiguous security questions

Nice to have

 * Security questionnaires, audits or third-party risk assessments
 * Cloud security concepts (AWS/GCP, Kubernetes, IAM)
 * Experience scaling trust, GRC or compliance processes in a growing organisation
 * Supporting enterprise customers, particularly in financial services

The environment

Fast-paced and high-intensity, with a small, dense team. You'd need to be comfortable with ambiguity and self-directed enough to own outcomes rather than wait for direction.

## Description

An AI company building analyst tooling for the world's largest investment banks, private equity funds and hedge funds is hiring a GRC Analyst to support its customer trust, security assurance and compliance programmes as it scales globally.

This is a hands-on role at a company with strong product-market fit and serious backing, at the point where enterprise customer demands are outgrowing the processes built to handle them.

What you'll own

 * Customer trust and security assurance, including responding to security inquiries and risk assessments
 * Acting as a key point of contact for customer security reviews, partnering internally to give accurate, consistent and timely responses
 * Maintaining and improving security documentation and response materials so they stay aligned to current systems and controls
 * Working with security and engineering to understand technical controls and articulate them in a customer-facing context
 * Supporting compliance across SOC 2, ISO 27001, ISO 42001, the EU AI Act, UK Cyber Essentials and GDPR, including evidence collection and audit readiness
 * Spotting recurring themes and gaps in customer inquiries and feeding them back into security and compliance practice
 * Streamlining trust workflows as customer volume and enterprise requirements grow