Governance, Risk and Compliance Analyst (Information Security)

The role

The GRC Analyst will manage compliance programs and oversee the GRC platform. This role involves automating controls, gathering audit evidence, and preparing for new certifications.

What you will do

• Manage the GRC platform daily including control owner assignments and evidence requests.
• Maintain integrations between the GRC platform and source systems to automate evidence collection.
• Identify manual control activities suitable for automation.
• Oversee the evidence collection cycle for SOC 2, ISO, and HIPAA assessments.
• Work with engineering, IT, HR, and platform teams to gather and validate audit artifacts.
• Manage the control library and framework crosswalks.
• Conduct initial gap assessments against new frameworks.
• Track the remediation of non-conformities to closure.
• Utilize AI-assisted tools for control narrative drafting and policy review.
• Maintain compliance documentation in Confluence and track work in Jira.

Required qualifications

• 2-4 years of experience in GRC, IT audit, or information security operations.
• Working knowledge of SOC 2, ISO 27001, NIST CSF and GDPR.
• Hands-on experience with GRC platforms (e.g., Vanta, Drata, OneTrust, Hyperproof, AuditBoard).
• Ability to read cloud architecture diagrams and discuss IAM, logging, and encryption.
• Basic terminal or cloud console skills.
• Familiarity with the SDLC and security controls in CI/CD pipelines.
• Experience with Google Workspace, Confluence, and Jira.
• Understanding of AI security and governance topics.
• Excellent written and verbal communication skills.
• Fluent in English (written and spoken).
• Strong analytical and critical-thinking skills.
• Comfortable in fast-paced, high-pressure situations.

Nice to have

• Exposure to ISO 27701, ISO 22301, ISO 42001, HIPAA, FedRAMP, StateRAMP, or HITRUST.
• Experience supporting a new framework certification from gap assessment through the first audit.
• Basic scripting skills (Python, Bash, SQL).
• Experience with AWS or other major cloud providers.
• Familiarity with additional security standards and frameworks (e.g., NIST 800-53, CIS Benchmarks, OWASP, SANS).
• Relevant certifications such as ISO/IEC 27001 Lead Implementer / Lead Auditor, CISA, CRISC, or CompTIA Security+.
• Bachelor's degree or equivalent experience.

About the company

Talkdesk is pioneering Customer Experience Automation (CXA) through AI-first solutions. The company is a global leader in the Gartner Magic Quadrant for Contact Center as a Service (CCaaS).