GRC Analyst

Role Overview

Join Vercel’s Governance, Risk & Compliance (GRC) team as a GRC Analyst. You’ll help manage and maintain ongoing compliance across security and privacy frameworks, ensuring Vercel operates ethically, responsibly, and in line with regulatory requirements.

Responsibilities

• Collaborate with internal teams to maintain an effective suite of internal controls and drive remediation efforts to completion with clear documentation.
• Build cross-functional relationships so compliance accountability is shared and stakeholders are informed.
• Streamline annual audits by managing audit deliverables, creating treatment plans, and coordinating to document and track completion.
• Monitor and improve controls, processes, and evidence management; identify opportunities to automate and streamline GRC operations.
• Support controls maturity scoring and reporting.
• Enable go-to-market by supporting security questionnaires, responding to compliance inquiries, and maintaining customer-facing documentation on Vercel’s security/compliance posture.
• Design and manage internal training and improve visibility on compliance, ethics, and regulatory requirements.

Requirements

• At least 3 years of experience supporting the audit lifecycle in a cloud-centric environment (e.g., SOC 2, ISO 27001, PCI, HIPAA).
• Strong organizational skills; proactive and flexible in a high-growth startup environment.
• Experience partnering with internal teams to incorporate policies and technical controls into the SDLC.
• Strong project management and ownership; effective communication and collaboration across business units.

Nice to Have

• Strong experience with cloud infrastructure (Azure, AWS).
• Familiarity with compliance or software development tools and systems (examples cut off in the posting).