Vercel
Tech / AI / Software
StaffGRCAnalyst
Neural analysis suggests this role is
optimal for Staff candidates.
“Staff GRC Analyst at Vercel. Skills: Governance, Risk, Compliance (GRC), SOC 2, ISO 27001, PCI DSS, audit processes, control frameworks. Own and scale commercial attestation program and audits (i. e. , SOC 2, ISO 27001, PCI DSS, etc. ) while maintaining alignment with business objectives and market demand.. Design and strengthen continuous monitoring processes to improve control effectiveness and mature control implementation from audit-ready to always-ready.”
Industry & Context.
What They're Looking For.
Must Have
Experience managing and running audits, certification programs and enterprise control assessments, including scope planning, defining requirements, policy and standards development, and control testing, Deep knowledge of audit processes, evidence requirements, and remediation lifecycle management for security and compliance frameworks (i. e. , SOC 2, ISO 27001, PCI DSS), Proven experience owning large-scale GRC programs, collaborating with technical and non-technical teams and driving initiatives to completion
Nice to Have
Familiarity with data governance, compliance or software development tools and systems (e. g. , Drata, Linear, Github, etc. ), Experience supporting cloud, AI-native, and open source development environments and systems, Experience with FedRAMP or NIST frameworks, such as 800-53, AI RMF, Security certifications (e. g. CISA, CISSP)
What You'll Do.
Own and scale commercial attestation program and audits (i.
, SOC 2, ISO 27001, PCI DSS, etc.
) while maintaining alignment with business objectives and market demand., Design and strengthen continuous monitoring processes to improve control effectiveness and mature control implementation from audit-ready to always-ready., Drive evolution of security and compliance control frameworks that set the direction for proactive risk management., Partner with cross-functional stakeholders, acting as a strategic connector to plan, implement, maintain & remediate control activities and supporting requirements (e.
policies, standards, processes, system configurations, etc.
), Champion a culture of compliance accountability and business-enablement across the organization through autonomous program governance and reporting and building trusted relationships.
How You'll Work.
Team & Collaboration
Partner with cross-functional stakeholders, acting as a strategic connector; collaborating with technical and non-technical teams
Process & Methodology
scope planning, defining requirements, policy and standards development, driving initiatives to completion
Full Job Description
About Vercel: Vercel gives developers the tools and cloud infrastructure to build, scale, and secure a faster, more personalized web. As the team behind v0, Next.js, and AI SDK, Vercel helps customers like Ramp, Supreme, PayPal, and Under Armour build for the AI-native web. Our mission is to enable the world to ship the best products. That starts with creating a place where everyone can do their best work. Whether you're building on our platform, supporting our customers, or shaping our story: You can just ship things. About the role: We are looking for a Staff GRC Analyst to join our Governance, Risk, and Compliance (GRC) team. You will have the opportunity to enhance our global compliance posture and further our commitment to managing enterprise risk. Your role will be instrumental in ensuring that our company operates in accordance with security requirements and embodies an environment where it’s everyone’s responsibility. This role will help shape the next iteration of the GRC program and further embed compliance requirements into the business. Think you may not have all the skills and are hesitant to apply? There is no “perfect” candidate and encourage you to apply if you think that you can bring value to our team and are passionate and committed to upholding the highest standards of compliance and ethics. If you’re based within a pre-determined commuting distance of one of our offices (SF, NY, London, or Berlin), the role includes in-office anchor days on Monday, Tuesday, and Friday, even if the role is listed as remote. For location-specific details, please connect with our recruiting team. Getting started: We want you to feel like part of the team early on! Our team will help integrate you into the company with explanations on our product, policies, processes, team structure and roadmap. We’re excited for you to learn, grow, and contribute right away! We trust that you’ll bring experience and knowledge that will uplift and up-level the team, but we don’t exp
Applying for this Staff GRC Analyst role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Greenhouse
- Create a Greenhouse profile before applying — it saves time across multiple applications.
- Upload your resume as a PDF; the parser handles it better than Word.
- Answer all knockout questions carefully — wrong answers auto-reject before a human sees you.
- Enable email notifications to track application status in real time.
ANONYMOUS · UNFILTERED
What do employees actually say about Vercel?
Real rants from real employees. Read before you apply.