GRC Analyst

The Security & Compliance team at Zip is committed to providing a high level of security assurance to customers, aligning security goals with business objectives and customer requirements. As a GRC Analyst at Zip, you’ll be a key driver for ensuring the success of compliance programs at a fast-growing company. Your contributions will be pivotal to the overall growth and competitive edge of Zip’s GRC program. You’ll ensure we can securely and compliantly build new features, help design and scale the compliance programs that power our expansion. You’ll help maintain our existing SOC and ISO certifications while supporting new certifications, from AI products to entry into new markets like the EU and highly-regulated industries.

Responsibilities

Drive and perform periodic compliance-related activities, such as user access reviews, internal audits, and vendor risk assessments; Lead conversations and curate responses for customers’ security, compliance, and governance teams in due diligence and security questionnaires; Guide internal control owners and stakeholders to understand requirements, take accountability, and operationalize their controls; Collaborate with internal stakeholders and external auditors to support third party audits including SOC 1, SOC 2, and ISO 27001; Develop, maintain, and lead the adoption of security policies, standards, and guidelines to ensure compliance with applicable regulatory requirements

Requirements

Bachelor’s degree in a related field; 2+ years of experience in GRC, information security consulting, cybersecurity risk, audits, or similar roles; Strong written and verbal communication skills with both technical and non-technical stakeholders; Familiarity with and participation in one or more of the following frameworks: SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, FedRAMP; Familiarity with information security fundamentals for cloud software systems

Nice to have

Professional certifications in information security

Benefits

Start-up equity; 100% health, vision & dental coverage options; Catered breakfast, lunch, & dinner; Flexible PTO; ClassPass membership; Monthly commuter benefit; Team building events & happy hours; Home office stipend; Phone/internet reimbursement; Paid parental leave; Fertility stipend; 401k plan; Unlimited AI token usage