{"id":1556476,"url":"https://alion.io/job/squarespace-grc-analyst","title":"GRC Analyst","company":{"id":63,"name":"Squarespace","domain":"squarespace.com","url":"https://alion.io/company/squarespace","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-01T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":108000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-30T17:40:08Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-01T16:13:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Squarespace is looking for a GRC Analyst to operate and continuously improve our governance, risk, and compliance programs within the Security organization. Our GRC team maintains audit readiness and supports the compliance frameworks - SOX, SOC 2, PCI DSS, NIST, and more - that protect Squarespace and the millions of customers who depend on us. We are a collaborative, detail-oriented team that moves deliberately and takes ownership of outcomes. You will work closely with Engineering, Legal, Finance, Product, and external auditors. This is an opportunity to modernize how GRC works - building automation, continuous monitoring, and data-driven reporting into programs that directly support revenue and customer trust.\nThis is a hybrid role working from our NYC office 3 days per week. You will report to the GRC Manager.\nYou'll Get To...\nLead and support audits across SOX, SOC, PCI, and NIST - from scoping through reporting - while maintaining audit-ready documentation and tracking findings to closure.\nEvaluate control design and operating effectiveness, manage security risk assessments and exception records, and escalate overdue or material risks to the right partners.\nConduct vendor security and privacy reviews, assess third-party control maturity, and track remediation through reassessment and closure.\nRespond to customer security questionnaires and partner assessments by coordinating timely, accurate responses across teams.\nSupport data privacy audits and assessments covering GDPR, CCPA/CPRA, data retention, deletion, access rights, and third-party processing.\nImprove GRC operations through automation, integrations, AI-enabled workflows, and continuous compliance monitoring that reduce manual effort and strengthen audit readiness.\nWho We're Looking For\n3+ years of experience in GRC, IT audit, security compliance, or privacy compliance, with demonstrated ability to manage audit activities end to end.\nProven experience leading or supporting complex compliance programs across frameworks such as SOX, SOC 1/2, PCI, NIST, or ISO - including scoping, control testing, issue management, and reporting.\nExperience evaluating IT controls and translating requirements into clear, actionable expectations for both technical and non-technical teams.\nExperience supporting vendor risk programs, including security due diligence and review of independent assurance reports.\nWorking knowledge of SaaS and cloud environments.\nExperience using GRC or workflow platforms to maintain accurate records and drive repeatable processes.\nNice to Haves\nExperience building or improving GRC automation, continuous control monitoring, or compliance dashboards.\nFamiliarity with privacy engineering concepts and privacy-by-design practices.\nBenefits & Perks\nA choice between medical plans with an option for 100% covered premiums \nFertility and adoption benefits\nAccess to supplemental insurance plans for additional coverage\nHeadspace mindfulness app subscription\nGlobal Employee Assistance Program\nRetirement benefits with employer match\nFlexible paid time off\n12 weeks paid parental leave and family care leave\nPretax commuter benefit\nEducation reimbursement\nEmployee donation match to community organizations\n7 Global Employee Resource Groups (ERGs)\nDog-friendly workplace\nFree lunch and snacks\nPrivate rooftop\nHack week twice per year\nCash Compensation Range: $108,000 - 125,000 USD\nThe base salary for this position will vary based on job-related criteria including relevant skills, experience, and location, among other factors.\nIn addition to the cash compensation above (which includes base salary and, where applicable for eligible roles, may include overtime pay), Squarespace employees are eligible to be granted an option to purchase our common stock. Sales positions generally offer a competitive On Target Earnings (OTE) incentive structure in addition to base salary.\nAbout Squarespace\nSquarespace is a design-driven platform helping entrepreneurs build brands and businesses online. We empower millions of customers in more than 200 countries and territories with all the tools they need to create an online presence, build an audience, monetize, and scale their business. Our suite of products range from websites, domains, ecommerce, and marketing tools, as well as tools for scheduling with Acuity and creating and managing social media presence with Bio Sites and Unfold. Our team of more than 1,700 is headquartered in New York City, with offices in Dublin, Ireland, and Aveiro, Portugal. For more information about our company, visithttps://www.squarespace.com/about/careers.\nOur Commitment \nToday, more than a million people around the globe use Squarespace to share different perspectives and experiences with the world. Not only do we embrace and celebrate the diversity of our customers, but we also work toward the same in our employees. At Squarespace, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or other class protected by applicable law. We are proud to be an equal opportunity workplace.\nThank you in advance for providing the following details about your work history from your resume! This helps us ensure that your candidate information is accurate and consistent during the hiring process.\nSquarespace will never solicit your personal banking information or ask you to transfer money in connection with a job offer or interview. We also will not reach out to you via phone or SMS without your permission or knowledge.\nIf you plan to use AI in any capacity during your candidate journey, please review our Candidate AI Policy.","description_format":"text","description_chars":5785,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Gift Cards & Loyalty Programs"],"lifecycle":[{"event":"open","at":"2026-10-01T02:09:35Z"}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-01T05:45:00Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/squarespace-grc-analyst","json_url":"https://alion.io/job/squarespace-grc-analyst.json","meta":{"generated_at":"2026-10-01T16:59:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":26,"day_limit":5000,"remaining_today":4974,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}