GRC/IT Compliance Analyst

About the role

This role will lead technical work focused on secure, reliable systems and risk-aware execution. You will work across engineering, product, operations, and business stakeholders to translate complex requirements into practical technology solutions. The position offers the opportunity to influence architecture, execution quality, and the technology capabilities that enable long-term growth within a hospitality and recreation environment.

Location: Remote - US based candidates only, no visa sponsorship available.

Responsibilities

• Build and implement a new enterprise risk assessment platform
• Continuously monitor and update the risk platform for evolving threats
• Participate in risk analysis to identify risks to regulated products
• Evaluate internal controls and recommend improvements
• Conduct user access reviews for applications
• Periodically review policies for compliance with best practices
• Draft documents for FDA regulatory submissions

Requirements

• 5-7 years of experience in security or compliance analysis, IT risk assessment, or risk management
• BS degree in relevant fields like Management Information Systems or Cybersecurity
• Experience with GRC software implementation
• Familiarity with FDA regulatory submissions and SaMD regulations
• Strong understanding of compliance frameworks like ISO 27001 and SOC 2
• Previous experience in a startup environment
• Experience with Agile/Scrum methodologies

Pay

$108,000 – $130,000 annually

Benefits

• XX% target annual bonus
• Stock options available
• Comprehensive paid benefits
• Opportunities for professional growth and training
• Flexible work environment
• Collaborative and supportive team culture