GRC Analyst

Vercel is seeking a mid-level GRC Analyst in the USA to join the Governance, Risk & Compliance legal team and report to the Head of GRC. This role focuses on managing security and privacy frameworks such as SOC 2, ISO 27001, HIPAA, and PCI DSS. The salary range for this position is $134,000 to $202,000, and the compensation package includes equity and an inclusive healthcare package.

Core Responsibilities

• Maintain internal controls and drive remediation efforts with clear documentation.
• Manage annual audit deliverables, treatment plans, and cross-functional coordination.
• Monitor and improve controls, processes, and evidence management while automating GRC operations.
• Support security questionnaires and customer-facing compliance documentation to enable go-to-market teams.
• Design company training on compliance, ethics, and regulatory requirements.

Candidate Requirements

Applicants must hold a Bachelor's degree and have a minimum of 3 years of relevant experience supporting the audit lifecycle in a cloud-centric environment. The role requires strong project management skills, ownership, and experience collaborating with internal partners to incorporate controls into the SDLC. Bonus qualifications include cloud infrastructure experience with AWS or Azure, familiarity with tools like Drata, Linear, or Datadog, frontend development experience, and industry certifications such as CISSP, CISM, or CCEP.

Work arrangement details regarding remote, hybrid, or onsite status can be discussed with the recruiting team, noting that those within commuting distance of SF, NY, London, or Berlin offices have in-office anchor days on Mondays, Tuesdays, and Fridays.