GRC Analyst

Squarespace is looking for a GRC Analyst to operate and continuously improve its governance, risk, and compliance programs within the Security organisation.

This is a hybrid role working from the NYC office 3 days per week. The successful candidate will report to the GRC Manager.

Key Responsibilities

• Lead and support audits across SOX, SOC, PCI, and NIST , from scoping through reporting , while maintaining audit-ready documentation and tracking findings to closure.
• Evaluate control design and operating effectiveness, manage security risk assessments and exception records, and escalate overdue or material risks to the right partners.
• Conduct vendor security and privacy reviews, assess third-party control maturity, and track remediation through reassessment and closure.
• Respond to customer security questionnaires and partner assessments by coordinating timely, accurate responses across teams.
• Improve GRC operations through automation, integrations, AI-enabled workflows, and continuous compliance monitoring that reduce manual effort and strengthen audit readiness.

Requirements

• 3+ years of experience in GRC, IT audit, security compliance, or privacy compliance, with demonstrated ability to manage audit activities end to end.
• Proven experience leading or supporting complex compliance programs across frameworks such as SOX, SOC 1/2, PCI, NIST, or ISO , including scoping, control testing, issue management, and reporting.
• Experience evaluating IT controls and translating requirements into clear, actionable expectations for both technical and non-technical teams.
• Experience supporting vendor risk programs, including security due diligence and review of independent assurance reports.
• Working knowledge of SaaS and cloud environments.
• Experience using GRC or workflow platforms to maintain accurate records and drive repeatable processes.

Nice to Haves

• Experience building or improving GRC automation, continuous control monitoring, or compliance dashboards.
• Familiarity with privacy engineering concepts and privacy-by-design practices.

Benefits & Perks

• A choice between medical plans with an option for 100% covered premiums
• Fertility and adoption benefits
• Access to supplemental insurance plans for additional coverage
• Headspace mindfulness app subscription
• Global Employee Assistance Program
• Retirement benefits with employer match
• Flexible paid time off
• 12 weeks paid parental leave and family care leave
• Pretax commuter benefit
• Education reimbursement
• Employee donation match to community organisations
• 7 Global Employee Resource Groups (ERGs)
• Dog-friendly workplace
• Free lunch and snacks
• Private rooftop
• Hack week twice per year