GRC Analyst, APAC

The role

The GRC Analyst will support customer trust, security assurance, and compliance programs. You will work with security, engineering, legal, and go-to-market teams to communicate security and privacy posture.

What you will do

• Support customer trust and security assurance processes.
• Respond to customer security inquiries and risk assessments.
• Serve as a point of contact for customer security reviews.
• Maintain and improve security documentation and response materials.
• Collaborate with security and engineering teams to articulate technical controls.
• Support compliance initiatives for SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR.
• Identify common themes and gaps from customer inquiries.
• Help streamline and scale trust-related workflows.

Required qualifications

• Experience supporting customer-facing security, compliance, or trust functions at a SaaS or cloud-native company.
• Experience translating technical security concepts into clear, concise written responses.
• An understanding of common enterprise security expectations across cloud infrastructure, access control, data protection, and incident response.
• Strong attention to detail and the ability to manage multiple parallel requests.
• Clear communication skills with both technical and non-technical stakeholders.
• Sound judgment when handling sensitive or ambiguous security questions.
• Interest in operating at the intersection of security, compliance, and customer engagement.

Nice to have

• Experience working with security questionnaires, audits, or third-party risk assessments.
• Exposure to cloud security concepts (AWS/GCP, Kubernetes, IAM).
• Experience improving or scaling trust, GRC, or compliance processes in growing organizations.
• Prior experience supporting enterprise customers.
• Comfort engaging with financial services customers on security, risk, and compliance topics.

About the company

Rogo aims to transform global finance by empowering professionals at investment banks, private equity funds, and investment firms with AI. The company is scaling quickly and defining a new category of enterprise AI.