# GRC Analyst

**Company**: Squarespace
**Location**: New York City
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $108,000 - 125,000 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/squarespace/jobs/8223803?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_f570c569-deb

## Description

Squarespace is looking for a GRC Analyst to operate and continuously improve its governance, risk, and compliance programs within the Security organisation.

This is a hybrid role working from the NYC office 3 days per week. The successful candidate will report to the GRC Manager.

### Key Responsibilities

- Lead and support audits across SOX, SOC, PCI, and NIST , from scoping through reporting , while maintaining audit-ready documentation and tracking findings to closure.

- Evaluate control design and operating effectiveness, manage security risk assessments and exception records, and escalate overdue or material risks to the right partners.

- Conduct vendor security and privacy reviews, assess third-party control maturity, and track remediation through reassessment and closure.

- Respond to customer security questionnaires and partner assessments by coordinating timely, accurate responses across teams.

- Improve GRC operations through automation, integrations, AI-enabled workflows, and continuous compliance monitoring that reduce manual effort and strengthen audit readiness.

### Requirements

- 3+ years of experience in GRC, IT audit, security compliance, or privacy compliance, with demonstrated ability to manage audit activities end to end.

- Proven experience leading or supporting complex compliance programs across frameworks such as SOX, SOC 1/2, PCI, NIST, or ISO , including scoping, control testing, issue management, and reporting.

- Experience evaluating IT controls and translating requirements into clear, actionable expectations for both technical and non-technical teams.

- Experience supporting vendor risk programs, including security due diligence and review of independent assurance reports.

- Working knowledge of SaaS and cloud environments.

- Experience using GRC or workflow platforms to maintain accurate records and drive repeatable processes.

### Nice to Haves

- Experience building or improving GRC automation, continuous control monitoring, or compliance dashboards.

- Familiarity with privacy engineering concepts and privacy-by-design practices.

### Benefits & Perks

- A choice between medical plans with an option for 100% covered premiums

- Fertility and adoption benefits

- Access to supplemental insurance plans for additional coverage

- Headspace mindfulness app subscription

- Global Employee Assistance Program

- Retirement benefits with employer match

- Flexible paid time off

- 12 weeks paid parental leave and family care leave

- Pretax commuter benefit

- Education reimbursement

- Employee donation match to community organisations

- 7 Global Employee Resource Groups (ERGs)

- Dog-friendly workplace

- Free lunch and snacks

- Private rooftop

- Hack week twice per year

## Skills

### Required
- GRC
- IT audit
- security compliance
- privacy compliance
- SOX
- SOC
- PCI
- NIST
- GRC automation
- continuous control monitoring
- compliance dashboards
- SaaS
- cloud environments

### Nice to have
- privacy engineering
- privacy-by-design practices

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/squarespace/jobs/8223803?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)