GRC Analyst

Joins Vercel's Security team as a GRC Analyst who uses AI tools to automate much of the compliance work; an engineering background is not required. The analyst keeps the controls behind ISO 27001, SOC 2, HIPAA and PCI DSS in shape and pushes remediation through, builds automations that gather audit evidence, watch controls and draft security questionnaire answers, runs the yearly audit cycle, reviews AI tools and vendors for security, privacy and compliance risk, and handles customer compliance questions, documentation and staff compliance training. Vercel wants three or more years supporting audits in a cloud environment, experience applying controls to AI systems or vendors and to the SDLC, and a record of leading cross-team compliance projects. Hybrid, three office days a week in San Francisco, New York or London.