GRC Analyst

GRC Analyst — AI Fintech Scale-Up | Manhattan, New York

An AI company building analyst tooling for the world's largest investment banks, private equity funds and hedge funds is hiring a GRC Analyst to support its customer trust, security assurance and compliance programmes as it scales globally.

This is a hands-on role at a company with strong product-market fit and serious backing, at the point where enterprise customer demands are outgrowing the processes built to handle them.

What you'll own

• Customer trust and security assurance, including responding to security inquiries and risk assessments
• Acting as a key point of contact for customer security reviews, partnering internally to give accurate, consistent and timely responses
• Maintaining and improving security documentation and response materials so they stay aligned to current systems and controls
• Working with security and engineering to understand technical controls and articulate them in a customer-facing context
• Supporting compliance across SOC 2, ISO 27001, ISO 42001, the EU AI Act, UK Cyber Essentials and GDPR, including evidence collection and audit readiness
• Spotting recurring themes and gaps in customer inquiries and feeding them back into security and compliance practice
• Streamlining trust workflows as customer volume and enterprise requirements grow

What you'll need

• Experience supporting customer-facing security, compliance or trust functions at a SaaS or cloud-native company
• The ability to translate technical security concepts into clear, concise written responses
• An understanding of enterprise security expectations across cloud infrastructure, access control, data protection and incident response
• Strong attention to detail, and the ability to run multiple parallel requests without dropping quality
• Sound judgment on sensitive or ambiguous security questions

Nice to have

• Security questionnaires, audits or third-party risk assessments
• Cloud security concepts (AWS/GCP, Kubernetes, IAM)
• Experience scaling trust, GRC or compliance processes in a growing organisation
• Supporting enterprise customers, particularly in financial services

The environment

Fast-paced and high-intensity, with a small, dense team. You'd need to be comfortable with ambiguity and self-directed enough to own outcomes rather than wait for direction.

Based in Manhattan.