{"id":79733,"url":"https://alion.io/job/vercel-grc-analyst","title":"GRC Analyst","company":{"id":1110,"name":"Vercel","domain":"vercel.com","url":"https://alion.io/company/vercel","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":93,"ghost_share":0.226,"stale_share":0,"repost_share":0.011,"time_to_fill_p50_days":78,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":134000,"max":202000,"currency":"USD","period":"year","gross":null,"usd_annual":202000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"OpenAI","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Vercel","optional":false}],"status":"live","first_seen_at":"2026-07-02T19:59:03Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-21T02:30:08Z","board_verified":true,"closed_at":null,"days_open":110,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":109},"description":"About Vercel:\nVercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.\nNow we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.\nAbout the role:\nWe are looking for a Governance, Risk and Compliance (GRC) Analyst who wants to build GRC with AI, and you do not need to be an engineer to do it. We encourage and equip you to use AI tooling to build automations for audit evidence and customer security questionnaires, alongside assessing AI tools and vendors and managing audits. This is a hybrid role based in San Francisco, New York City, or London with three days a week in the office.\nWhat you’ll do:\nAssess AI tools and vendors against security, privacy, and compliance requirements, and run company compliance and ethics training\nMaintain the internal controls behind ISO 27001, System and Organization Controls 2 (SOC 2), Health Insurance Portability and Accountability Act (HIPAA), and Payment Card Industry Data Security Standard (PCI DSS) compliance, and drive remediation to completion with documented progress\nUse AI tooling to build automations that collect audit evidence, monitor controls, and draft security questionnaire responses, and report on controls maturity scores\nManage annual audit deliverables, write treatment plans, and track completion across teams\nAnswer customer compliance inquiries and maintain customer-facing security and compliance documentation\nWhat you need:\n3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment\nApplied security or privacy controls to AI systems or AI vendors, such as model access, data handling, or third-party risk review\nBuilt security policies and technical controls into the software development lifecycle (SDLC) with engineering partners\nLed compliance projects across multiple business units and seniority levels\nBonus if you:\nBuilt an automation or internal tool, with code or AI coding tools, even outside an engineering role\nWorked with AI governance frameworks such as ISO/IEC 42001 or the National Institute of Standards and Technology (NIST) AI Risk Management Framework\nHold a Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Compliance & Ethics Professional (CCEP) certification\nCompensation & Benefits:\nCompetitive compensation package, including equity.\nInclusive Healthcare Package.\nLearn and Grow - we provide mentorship and send you to events that help you build your network and skills.\nFlexible Time Off.\nWe will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.\nThe San Francisco, CA base pay range for this role is $134,000-$202,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.\nDisclosures:\nPrivacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data.\n Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.","description_format":"text","description_chars":3993,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-07-02T19:59:03Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":1,"p_active":0.574,"p_room":0.44,"age_days":109,"expected_fill_days":78,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":202000,"is_top_pay":true},"html_url":"https://alion.io/job/vercel-grc-analyst","json_url":"https://alion.io/job/vercel-grc-analyst.json","meta":{"generated_at":"2026-10-21T05:49:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8493,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1110},"rest":"https://alion.io/mcp/rest/get_company?id=1110"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvercel-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvercel-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvercel-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vercel-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvercel-grc-analyst"}]}