Senior Analyst, GRC

The role

You will conduct third-party and AI tool risk assessments and maintain PCI and privacy compliance evidence. You will also document security controls, update policies, and maintain the risk register.

What you will do

• Conduct third-party and AI tool risk assessments through intake and triage process
• Track remediation to closure
• Collect and maintain evidence for PCI DSS and privacy compliance
• Document security controls and monitor their health
• Support internal and external audits
• Update policies, standards, and baselines
• Track exceptions
• Maintain the risk register
• Support quarterly risk reporting
• Partner with control owners across IT, Engineering, and Legal

Required qualifications

• 3+ years in GRC, IT audit, compliance, or a related security function (or equivalent experience)
• Working knowledge of at least one security or compliance framework (e.g., PCI DSS, NIST, SOC 2, or ISO 27001)
• Hands-on experience with a GRC or governance platform (e.g., Hyperproof, Archer, or OneTrust), or the ability to pick one up quickly
• Strong documentation skills
• Sharp eye for detail
• Clear written communication

Benefits

• Competitive Compensation
• Comprehensive health and wellness benefits that start on day one
• Access to free therapy or counseling
• Paid parental leave, up to 12 weeks at 100% of regular salary
• Inclusive fertility and family-building care
• Unlimited PTO
• Generous employee referral program
• Casual office attire
• Ability to bring your fur baby to work
• Cool VEG swag
• Food in the fridge
• Free lunches twice a week

About the company

VEG was born in 2014 with a mission to help people and their pets by challenging norms and fixing the ER experience. The company has hospitals nationwide open 24/7/365.