SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 115,000 - 155,000 / annual
FloQast, an AI-powered accounting transformation platform, is seeking a GRC Analyst to join the InfoSec & Compliance department, which reports directly to the General Counsel. This role serves as a risk and controls advisor, ensuring adherence to key compliance frameworks across the organization and evaluating business initiatives from a risk and controls perspective.
Key responsibilities include:
- Managing FloQast's internal controls inventory, including documentation of control owners, testing procedures, related policies, and pertinent information
- Working with control owners to ensure process narratives are documented and updated annually
- Initiating, monitoring, and following up on monthly and quarterly control activities to ensure timely completion and proper evidence documentation for audit requirements
- Serving as a trusted advisor for security and compliance, engaging with teams across the company to foster a risk-aware culture
- Facilitating the development and maintenance of policies, standards, processes, and guidelines through drafting, gathering approvals, and reporting on changes
- Supporting annual internal and external audits (ISO 27001, ISO 27701, ISO 42001, SOC 1, SOC 2, and similar frameworks) by scheduling interviews, submitting evidence requests, reviewing documentation, and ensuring audits remain on schedule
- Aggregating identified internal control issues, performing root cause analysis, and collaborating on remediation efforts
- Supporting customer assurance activities, including security questionnaires and customer discussions
- Participating in cross-functional project teams
The InfoSec & Compliance department is a team of in-house subject matter experts who advise, direct, train, and monitor the organization, with daily interactions across all departments on unique business initiatives. This role is expected to evolve as departmental needs grow.
Requirements:
- 3-5+ years of relevant GRC, risk management, or compliance experience
- Knowledge and familiarity with at least one security, privacy, and compliance framework (SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, PCI, HIPAA, or similar)
- Understanding of information security and privacy fundamentals
- Certification preferred in one of the following: CompTIA, CISSP, CISA, CISM, or cloud platforms (AWS, Azure, GCP)
- Confidence and willingness to ask questions, raise issues, and concerns in a timely manner
- Understanding of AI governance or leveraging AI tools to improve compliance and audit efficiency
Nice to haves:
- Familiarity with NIST, CIS, and other information security frameworks
- Experience working for a software development company
- Highly collaborative, detail-oriented, intellectually curious with strong organizational skills
- Builder mindset, comfortable sharing ideas and trying new approaches
- Flexible and adaptable in high-growth, startup environment
Note: This role requires working in office 3 days per week, subject to change based on team and business needs. Visa sponsorship is not available at this time.
