Vercel
GRC Analyst
$134K–$202K
Hybrid - San Francisco, New York City, London +1 · Full-time · Posted Jul 2, 2026
- Location
- Hybrid - San Francisco, New York City, London
San Francisco, California, United States - Experience
- 3+ years supporting the audit lifecycle for the listed frameworks.
About the job
Build and maintain Vercel’s GRC program by managing audits and controls, assessing AI tools and vendors, and using AI tooling to automate compliance work.
What you'll do
- Maintain compliance controls and drive remediation for ISO 27001, SOC 2, HIPAA, and PCI DSS; manage annual audit deliverables and treatment plans.
- Assess AI tools and vendors, run compliance and ethics training, and respond to customer compliance inquiries.
- Use AI tooling to automate audit evidence collection, control monitoring, and security questionnaire responses; report on controls maturity.
What they ask for
- 3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment.
- Applied security or privacy controls to AI systems or vendors.
- Built security policies and technical controls into the software development lifecycle (SDLC) with engineering partners.
- Led compliance projects across multiple business units and seniority levels.
Nice to have
- Built an automation or internal tool, with code or AI coding tools.
- Worked with AI governance frameworks such as ISO/IEC 42001 or the NIST AI Risk Management Framework; CISM, CISSP, or CCEP certification.
Pay
$134,000-$202,000 USD base salary
Tools
AI tooling, ISO 27001, SOC 2, HIPAA, PCI DSS, SDLC, ISO/IEC 42001, NIST AI Risk Management Framework
AI focus
Assess AI tools and vendors against security, privacy, and compliance requirements; apply controls to AI systems or vendors; build AI-powered automations for audit evidence, control monitoring, and questionnaire responses.
Model-written summary · the original posting is authoritative