{"id":1745353,"url":"https://alion.io/job/huge-it-risk-and-compliance-analyst","title":"IT Risk and Compliance Analyst","company":{"id":63737,"name":"Huge","domain":"hugeinc.com","url":"https://alion.io/company/hugeinc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":80000,"max":90000,"currency":"USD","period":"year","gross":null,"usd_annual":90000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false}],"status":"closed","first_seen_at":"2026-10-02T16:42:03Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-11-03T20:14:11Z","board_verified":false,"closed_at":"2026-11-03T20:14:11Z","days_open":32,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":32},"description":"Location: This position is remote within the United States.\nThe role. \nWe are looking for an IT Risk and Compliance Analyst to join the IT Risk and Compliance team and carry the day-to-day execution of the program. This is a generalist role spanning client contracts and security questionnaires, control evidence and gap remediation, vendor risk, data retention and privacy, and the policies that tie it all together.\nThe program is being rebuilt from the ground up, so you will help shape how the work gets done. The ideal candidate is organized, comfortable with legal and technical language, and able to keep many threads moving at once.\nWhat you’ll be doing. \nReview client MSAs, SOWs, DPAs, and security addenda using our contract analysis tooling; identify clauses that need Legal, IT, or Delivery attention and coordinate redlines through to signature.\nTranslate signed contractual obligations (security, privacy, data handling, audit rights, breach notification, sub-processor terms) into tracked commitments and confirm they are being met operationally.\nRespond to client security questionnaires, due diligence requests, and audit inquiries; maintain the reusable answer library so responses get faster and more consistent over time.\nCollect, organize, and maintain control evidence in the GRC platform; track gap remediation against SOC 2, ISO 27001, NIST CSF, and other frameworks as they are adopted.\nSupport vendor risk assessments for SaaS and AI providers: review vendor security documentation, DPAs, and sub-processor lists, and record and monitor findings in the vendor register.\nOperationalize the data retention and disposal policy: track department retention schedules, document exceptions and legal holds, and verify retention settings across platforms with IT.\nSupport the privacy program including data mapping, data subject request handling, and GDPR and CCPA obligation tracking.\nDraft and maintain compliance policies, SOPs, and process documentation; keep them current, published (for internal use where applicable) and actually followed.\nPrepare risk and compliance status reporting for leadership.\nParticipate in business continuity and disaster recovery planning and tabletop exercises.\nParticipate in security incident response management.\nMaintain and monitor risk register and prepare for annual risk assessment.\nAdminister security awareness training and track compliance.\nSupport internal audits, access reviews, and periodic control testing.\nWhat we’d like to see.\nBachelor’s degree required or equivalent practical experience.\n3-5 years of experience in compliance, GRC, contract management, privacy, or a related field.\nHands-on experience reading and reviewing commercial contracts, ideally MSAs, DPAs, or security addenda, and working with legal counsel on redlines.\nExperience responding to client security questionnaires or vendor due diligence requests.\nWorking knowledge of at least one major compliance framework (SOC 2, ISO 27001, NIST CSF) and what evidence looks like in practice.\nFoundational understanding of data privacy regulations (GDPR, CCPA) and how they show up in contracts.\nExceptional organization and follow-through; you can run many parallel threads and nothing slips.\nClear, concise written communication; you can summarize a 40-page contract into the three things that matter.\nComfortable working with SaaS tools and learning new platforms quickly; you like using software to make process better.\nSelf-directed and effective in a small team where you own outcomes end to end.\nThis role is currently not available for hire or work in New Mexico, Montana, Alaska and Hawaii, USA.\nAbout Huge.\nHuge is an independent, human-first AI-native design and technology company. We make things that matter by bringing AI, people, design and technology together as one system. With more than 1,000 design and technology experts working in hub cities around the world, including Bogotá, Chicago, Ho Chi Minh City, London, Los Angeles, Medellín, New York, San Francisco, and Washington, DC, we partner with some of the world’s most ambitious brands, including Google, NBCU, PepsiCo, Vail Resorts, Atlantic Health, and Candescent. Learn more at hugeinc.com.\nHuge is committed to creating an inclusive employee experience for all. Regardless of race, gender, religion, sexual orientation, age, disability, or if you’re parenting the next generation of innovators, we firmly believe that our work is at its best when everyone feels free to be their most authentic self.\nHuge is an equal opportunity employer (EOE). We strongly support diversity in the workforce. We are committed to an inclusive, barrier-free recruitment and selection process and work environment. If you are contacted for a job opportunity, please advise us of any accommodation needed to ensure you have access to a fair and equitable process. Any information received relating to accommodation will be addressed confidentially.\nWorkers shall not be required to pay employers’ or agents’ recruitment fees or other related fees for their employment. If any such fees are found to have been paid by workers, such fees shall be repaid to the worker.\n#LI-POST #LI-Remote\nThe salary range for this position is as listed below. Exactly where a prospective employee will be paid within this range will depend on, among other factors, the actual salary ranges for current and former employees who are either currently filling a similar role or did in the past; the candidate’s depth of experience and qualifications; the level of specialization the role requires; budgetary considerations; the market demand for that role and the local market conditions that exist where the employee will be based. For current Huge employees, tenure will also be a consideration.\nWage Disclosure\n$80,000—$90,000 USD","description_format":"text","description_chars":5806,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Creative Agencies","UI/UX Design","Digital Marketing"],"lifecycle":[{"event":"open","at":"2026-10-03T05:36:30Z"},{"event":"close","at":"2026-11-03T20:14:11Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 2","filings_12m":0,"filings_prev_12m":0,"green_card_filings_12m":2,"median_offered_wage_usd":127500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":null,"pay":{"stated_usd_annual":90000,"is_top_pay":false},"html_url":"https://alion.io/job/huge-it-risk-and-compliance-analyst","json_url":"https://alion.io/job/huge-it-risk-and-compliance-analyst.json","meta":{"generated_at":"2026-11-05T07:01:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8748,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":63737},"rest":"https://alion.io/mcp/rest/get_company?id=63737"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhuge-it-risk-and-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhuge-it-risk-and-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhuge-it-risk-and-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/huge-it-risk-and-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhuge-it-risk-and-compliance-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1745353}},{"tool":"search_jobs","arguments":{"company":"hugeinc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1745353},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}