GRC Analyst

A GRC analyst on FloQast's compliance team, which reports to the General Counsel and keeps the company in line with ISO 27001, 27701 and 42001, SOC 1, SOC 2, GDPR and CPRA. The analyst maintains the internal controls inventory and process narratives, chases monthly and quarterly control activities and evidence, updates policies and standards, coordinates internal and external audits, performs root-cause analysis on control issues, and helps with customer security questionnaires.

FloQast asks for three to five years of relevant experience, knowledge of at least one framework such as SOC 2 or ISO 27001, security and privacy fundamentals, and a certification such as CISA, CISSP or a cloud credential. The role is in the Los Angeles office three days a week.