{"id":3022974,"url":"https://alion.io/job/floqast-grc-analyst","title":"GRC Analyst","company":{"id":673137,"name":"FloQast","domain":"floqast.com","url":"https://alion.io/company/floqast","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":86,"open_postings":32,"ghost_share":0,"stale_share":0.344,"repost_share":0,"time_to_fill_p50_days":96,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States","New York, United States","Chicago, United States","Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":90000,"max_usd":173000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-21T16:35:47Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-26T00:56:14Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"FloQast is looking for a GRC Analyst to join our growing Compliance team. This position will support the management of compliance controls, organizational policies, procedures, and standards in support of regulatory compliance needs as well as organizational information security practices. You will advise and build relationships with key team members across multiple core departments, aligning department workflows to build a best-in-class compliance program.\nThe Compliance department at FloQast reports directly to the General Counsel and is responsible for ensuring FloQast maintains compliance with an array of security and privacy frameworks, including GDPR, CPRA, ISO 27001, ISO 27701, ISO 42001, SOC 1, and SOC 2. We are a team of in-house subject matter experts that advise, direct, train, and monitor the organization, resulting in daily interactions with all departments working together on a variety of unique and interesting business initiatives.\nThis role has a requirement of working in office 3 days per week, which may be subject to change based on team and business needs, as determined by the department leader. Please note that this requirement is subject to ongoing review and may be adjusted in the future.\n*Visa sponsorship is NOT available at this time\nWhat You'll Do\nManage FloQast's internal controls inventory as new controls are added and existing controls are changed\nBuild upon the controls inventory to ensure control owners, testing procedures, related policies, and other pertinent information is accurately documented and kept up to date\nWork with control owners to ensure process narratives are documented and updated annually for all controls\nInitiate, monitor, and follow up on monthly and quarterly control activities to ensure they are completed on time and proper evidence is documented to meet audit requirements.\nServe as a trusted advisor and advocate for security and compliance, engaging with teams across the company to foster a strong risk-aware culture.\nFacilitate the development and maintenance of policies, standards, processes, and guidelines by drafting the documentation update, gathering the appropriate approvals, and reporting on all changes in policy review meetings.\nSupport annual internal and external ISO 27001, ISO 27701, ISO 42001 SOC 1, SOC 2, and other similar audits by scheduling audit interviews, submitting evidence requests to control owners, following up as needed to obtain evidence on time, reviewing evidence provided for accuracy, and facilitating follow up requests as needed to ensure our audits remain on schedule.\nAggregate identified internal control issues and perform a root cause analysis and collaborate on remediation efforts\nBe an advocate for compliance best practices and the point of contact for stakeholders from departments throughout the company\nSupport customer assurance activities, including completion of security questionnaires and participation in customer discussions.\nParticipate in and contribute to cross-functional project teams\nAny other tasks that may be assigned to help the company meet its goals\nWhat You'll Bring\n3-5+ years of relevant experience\nKnowledge and familiarity with at least one security, privacy, and compliance practices (SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, PCI, HIPAA, etc)\nUnderstanding of information security and privacy fundamentals\nCertification preferred in one of the following: CompTIA, CISSP, CISA, CISM, Cloud platforms such as AWS, Azure or GCP\nConfidence and willingness to ask questions, raise issues, and concerns in a timely manner\nUnderstanding of AI governance or leveraging AI tools to improve compliance and audit efficiency\nNice to haves/Others\nFamiliarity with NIST, CIS, and other information security frameworks is a bonus but not required\nExperience working for a software development company is a bonus but not required\nHighly collaborative, detail-oriented, intellectually curious, with strong organizational skills and an authentically friendly demeanor \nBuilder mindset, comfortable sharing ideas, trying new approaches and is focused on achieving team and company short and long term goals\nFlexible and adaptable in high growth, start-up environment","description_format":"text","description_chars":4215,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial AI","Accounting & Tax Software"],"lifecycle":[{"event":"open","at":"2026-10-21T18:18:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 6","filings_12m":6,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":227500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":96,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/floqast-grc-analyst","json_url":"https://alion.io/job/floqast-grc-analyst.json","meta":{"generated_at":"2026-10-26T01:02:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1296,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673137},"rest":"https://alion.io/mcp/rest/get_company?id=673137"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffloqast-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffloqast-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffloqast-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/floqast-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffloqast-grc-analyst"}]}