Vibesllc
Governance, Risk, and Compliance (GRC) Analyst
Chicago, IL (Hybrid). Posted 15 days ago
The role
You will collect evidence, test controls, and manage audits to protect customer data. You will also handle vendor risk assessments, customer security questionnaires, and policy administration.
What you will do
- Collect and organize control evidence continuously
- Coordinate internal and external audits and serve as the contact for auditors
- Prepare regular control and audit status reports for leadership
- Test whether controls work as designed and work with owners to close gaps
- Maintain the finding registry and verify closure
- Run quarterly user access reviews, sample offboarding, and reconcile inventories
- Review vendor risk assessments and recommend approval or follow-up
- Draft responses to customer security questionnaires and RFP compliance sections
- Use and help improve an AI tool for questionnaire responses
- Administer the policy lifecycle including review dates, version control, and attestation tracking
Required qualifications
- 2 years in audit, compliance, or governance, risk, and compliance (or equivalent)
- Working knowledge of a recognized control framework and how evidence maps to it
- Handled customer security questionnaires and/or RFP security sections end to end
- Built or maintained a questionnaire answer library
- Comfortable using AI tools to draft compliance answers, with review steps
Nice to have
- control testing experience (picking samples, judging whether evidence proves the control, writing up gaps)
- basic Smartsheet
- compliance platform experience
Benefits
- competitive salaries
- options
- medical, dental and vision coverage
- short and long term disability
- life insurance
- 11 paid holidays
- flexible vacation
- commuter benefits
- 401(k) plan and match
- paid parental leave program
About the company
Vibes’ mobile-first platform creates personal, revenue-driving and long-term mobile engagement between consumers and brands. Industry leaders use Vibes to grow customer relationships using mobile messaging and mobile wallet marketing.