GRC Analyst

<p><strong>GRC Analyst — AI Fintech Scale-Up | Manhattan, New York</strong></p><p><br /></p><p>An AI company building analyst tooling for the world's largest investment banks, private equity funds and hedge funds is hiring a GRC Analyst to support its customer trust, security assurance and compliance programmes as it scales globally.</p><p><br /></p><p>This is a hands-on role at a company with strong product-market fit and serious backing, at the point where enterprise customer demands are outgrowing the processes built to handle them.</p><p><br /></p><p><strong>What you'll own</strong></p><ul><li>Customer trust and security assurance, including responding to security inquiries and risk assessments</li><li>Acting as a key point of contact for customer security reviews, partnering internally to give accurate, consistent and timely responses</li><li>Maintaining and improving security documentation and response materials so they stay aligned to current systems and controls</li><li>Working with security and engineering to understand technical controls and articulate them in a customer-facing context</li><li>Supporting compliance across SOC 2, ISO 27001, ISO 42001, the EU AI Act, UK Cyber Essentials and GDPR, including evidence collection and audit readiness</li><li>Spotting recurring themes and gaps in customer inquiries and feeding them back into security and compliance practice</li><li>Streamlining trust workflows as customer volume and enterprise requirements grow</li></ul><p><br /></p><p><strong>What you'll need</strong></p><ul><li>Experience supporting customer-facing security, compliance or trust functions at a SaaS or cloud-native company</li><li>The ability to translate technical security concepts into clear, concise written responses</li><li>An understanding of enterprise security expectations across cloud infrastructure, access control, data protection and incident response</li><li>Strong attention to detail, and the ability to run multiple parallel requests without dropping quality</li><li>Sound judgment on sensitive or ambiguous security questions</li></ul><p><br /></p><p><strong>Nice to have</strong></p><ul><li>Security questionnaires, audits or third-party risk assessments</li><li>Cloud security concepts (AWS/GCP, Kubernetes, IAM)</li><li>Experience scaling trust, GRC or compliance processes in a growing organisation</li><li>Supporting enterprise customers, particularly in financial services</li></ul><p><br /></p><p><strong>The environment</strong></p><p>Fast-paced and high-intensity, with a small, dense team. You'd need to be comfortable with ambiguity and self-directed enough to own outcomes rather than wait for direction.</p><p><br /></p><p>Based in Manhattan.</p><p><br /></p><p>If this sounds like you, get in touch.</p><p>[email protected]</p><p>+1 212 970 7603</p>