Security Governance Risk & Compliance Analyst I

About the role

Entry-level GRC Analyst on Commerce's (BigCommerce, Feedonomics, Makeswift) Governance, Risk & Compliance team, supporting day-to-day risk and compliance operations: third-party vendor assessments, policy documentation, control evidence tracking, audit support. 0-2 years experience, internships count; interest in applying AI tools like Claude Code to GRC work. Remote US, $49,729-$73,130.

Requirements

• 0-2 years of experience in GRC, risk operations, compliance or related function (internships count)
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business or related field; equivalent experience considered
• Genuine interest in GRC engineering and willingness to learn quickly
• Hands-on familiarity with Claude Code or similar AI coding tools and ability to think through applying them to cybersecurity or GRC work (hobby projects welcome)
• Strong written and verbal communication
• High attention to detail with documentation, spreadsheets, tracking tools
• Proficiency in Microsoft Office or Google Workspace

What you'll do

• Support third-party risk assessments: review vendor security questionnaires and due diligence materials
• Maintain vendor risk register and track remediation to closure
• Assist with internal control testing and evidence collection for SOC 2, ISO 27001, PCI-DSS
• Coordinate audit requests and gather documentation from internal stakeholders
• Monitor policy and procedure documentation for review and update
• Track risk exceptions and escalate for senior review
• Support reporting and metrics for leadership and committee reviews

Where this was posted

• Hiring Cafe

  last seen 2h ago
  View on Hiring Cafe