{"id":2814010,"url":"https://alion.io/job/bigcommerce-security-governance-risk-compliance-analyst-i","title":"Security Governance Risk & Compliance Analyst I","company":{"id":58466,"name":"BigCommerce","domain":"bigcommerce.com","url":"https://alion.io/company/bigcommerce","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":49729,"max":73130,"currency":"USD","period":"year","gross":null,"usd_annual":73130},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Claude Code","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Office","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-18T09:30:12Z","employer_posted_date":null,"last_verified_at":"2026-10-18T09:30:12Z","board_verified":false,"closed_at":null,"days_open":18,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":18},"description":"Welcome to the Agentic Commerce EraAt Commerce, our mission is to empower businesses to innovate, grow, and thrive with our open, AI-driven commerce ecosystem. As the parent company of BigCommerce, Feedonomics, and Makeswift, we connect the tools and systems that power growth, enabling businesses to unlock the full potential of their data, deliver seamless and personalized experiences across every channel, and adapt swiftly to an ever-changing market. We believe in harnessing AI responsibly to unlock new possibilities, and we’re looking for individuals who use it intentionally to solve problems, accelerate outcomes, and expand what’s possible in their role. Our purpose is to help businesses confidently solve complex commerce challenges so they can build smarter, adapt faster, and grow on their own terms. If you want to be part of a team of bold builders, sharp thinkers, and technical trailblazers who shape the future of commerce, this is the place for you.\nWe're looking for a detail-oriented and curious GRC Analyst to join our Governance, Risk & Compliance team. In this role, you'll support the day-to-day operations of our risk and compliance program, helping assess third-party vendors, maintain policy documentation, track control evidence, and support audit activities.\nWe're especially interested in candidates who've explored tools like Claude Code and are curious about how AI can be applied to cybersecurity and compliance work. This is a great opportunity for someone early in their career who wants to build a strong foundation in enterprise risk management and information security compliance, joining a senior, globally distributed team that will invest in your growth from day one.\nWhat You'll Do\nSupport third-party risk assessments by reviewing vendor security questionnaires, documentation, and due diligence materials\n\nMaintain and update the vendor risk register and track remediation activities to closure\n\nAssist with internal control testing and evidence collection for compliance frameworks (SOC 2, ISO 27001, PCI-DSS, etc.)\n\nHelp coordinate audit requests and liaise with internal stakeholders to gather required documentation\n\nMonitor policy and procedure documentation, flagging items due for review or update\n\nAssist in tracking risk exceptions, escalating items that require senior review\n\nSupport reporting and metrics preparation for leadership and committee-level reviews\n\nContribute to process improvement initiatives as the program scales\n\nWhat We're Looking For\n0–2 years of experience in GRC, risk operations, compliance, or a related function (internships count)\n\nBachelor's degree Computer Science, Cybersecurity, Information Systems, Business, or a related field. Equivalent work experience also considered.\n\nGenuine interest in GRC engineering and a willingness to learn quickly in a fast-paced environment required\n\nHands-on familiarity with Claude Code or similar AI coding tools, and an ability to think through how they could be applied to cybersecurity or GRC work (hobby projects welcome)\n\nStrong written and verbal communication skills - you'll be working cross-functionally and with external vendors\n\nHigh attention to detail and comfort working with documentation, spreadsheets, and tracking tools\n\nProficiency in Microsoft Office or Google Workspace\n\nNice To Have\nCoursework or certification in cybersecurity or risk management (Security+, CISA, etc.)\n\nExposure to compliance frameworks such as SOC 2, ISO 27001, NIST, or PCI-DSS\n\nExperience in an operations or process-driven role (internship or otherwise)\n\nSalary Transparency Range: $49,729.00 - $73,130.00\nCompensation Transparency The national base salary range for this role is posted above in this job post.\nFinal compensation will be determined based on factors such as relevant experience, skills, qualifications and geographic location. We also consider internal equity to help ensure fair and consistent pay practices across our teams.\nWhere applicable, this role may also be eligible for variable compensation (such as bonus or commission), equity, and benefits in accordance with local policies. Details will be shared during the hiring process. We are committed to equitable and transparent pay practices that align to market data, internal equity, and individual contribution.\nInclusion and BelongingAt Commerce, we believe that celebrating the unique histories, perspectives and abilities of every employee makes a difference for our company, our customers and our community. We are an equal opportunity employer and the inclusive atmosphere we build together will make room for every person to contribute, grow and thrive.\nWe are committed to creating an inclusive and accessible hiring experience for all candidates. If you require accommodations or adjustments at any stage of the recruitment process, please let us know and we will work with you to meet your needs. \nLearn more about the Commerce team, culture and benefits at \nIdentity Verification\nTo protect our candidates and company from fraudulent activity, our interview process includes a government ID and biometric verification via Persona, our trusted identity verification provider. All information is collected and processed securely in accordance with applicable privacy laws.\n\nProtect Yourself Against Hiring Scams: Our Corporate Disclaimer \nCommerce, along with many other employers, has become the subject of fraudulent job offers to hopeful prospective job seekers.\nBe advised:Commerce does not offer jobs to individuals who do not go through our formal hiring process.\nCommerce will never:\nrequire payment of recruitment fees from candidates;\n\nrequest personally identifiable information through unsanctioned websites or applications;\n\nattempt to solicit money from you as part of the hiring process or as part of an employment offer;\n\nsolicit money to complete visa requirements as part of a job offer.\n\nIf you receive unsolicited offers of employment from Commerce, we urge you to be extremely cautious and avoid engaging or responding.\nOriginally posted on Himalayas","description_format":"text","description_chars":6073,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Commerce"],"lifecycle":[{"event":"open","at":"2026-10-18T11:28:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3 · green card filings: 8","filings_12m":3,"filings_prev_12m":9,"green_card_filings_12m":8,"median_offered_wage_usd":143864,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.869,"p_room":0.9,"age_days":17,"expected_fill_days":30,"reasons":["seen:17","velocity","win:mid","comp:junior"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":73130,"is_top_pay":false},"html_url":"https://alion.io/job/bigcommerce-security-governance-risk-compliance-analyst-i","json_url":"https://alion.io/job/bigcommerce-security-governance-risk-compliance-analyst-i.json","meta":{"generated_at":"2026-11-05T22:11:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2806,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58466},"rest":"https://alion.io/mcp/rest/get_company?id=58466"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbigcommerce-security-governance-risk-compliance-analyst-i"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbigcommerce-security-governance-risk-compliance-analyst-i"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbigcommerce-security-governance-risk-compliance-analyst-i"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bigcommerce-security-governance-risk-compliance-analyst-i\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbigcommerce-security-governance-risk-compliance-analyst-i"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2814010}},{"tool":"search_jobs","arguments":{"company":"bigcommerce.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2814010},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}