[Hiring] Senior GRC Compliance Analyst @GoTo

Role Description

As a Senior GRC Compliance Analyst you would be working on:

• Serve as a senior level GRC engineering contributor, combining practical compliance knowledge with hands-on systems, data, automation, and AI-enabled solution delivery.
• Perform control mapping, gap analysis, and remediation tracking across multiple frameworks to proactively reduce audit risk.
• Partner with engineering, IT, security, and data teams to translate regulatory requirements into testable controls, connected data workflows, and practical automation.
• Build repeatable workflows, dashboards, alerts, and tooling integrations that improve control visibility, evidence quality, and remediation tracking.
• Use Claude Cowork/Code and related AI tools to build GRC solutions, including evidence automation, control monitoring, risk reporting, dashboards, and internal compliance systems.

Qualifications

• Experience in cloud or SaaS control environments across frameworks such as NIST 800-53, ISO 27001, PCI DSS, SOC 2, HIPAA, FedRAMP, or similar.
• Ability to map requirements to technical controls, identify gaps, and turn compliance needs into system or automation requirements.
• Experience managing audit evidence and remediation during live audit cycles, with a bias toward automation and repeatability.
• Effective verbal and written communication skills with proven ability to engage technical stakeholders effectively.
• Hands-on automation experience with tools such as Python, SQL, APIs, GitHub, Github Actions, GCI/CD, CLI workflows, data pipelines, dashboards, alerting, or similar technologies.
• Experience using Claude Cowork/Code, Claude, Anthropic tools, or comparable AI-assisted development platforms to build internal tools, connect data sources, and accelerate GRC work.

Benefits

• Comprehensive health benefits.
• Generous paid time off, including paid holidays, volunteer days, quarterly self-care days, and company-designated no-meeting days.
• Tuition reimbursement and access to instructor-led and on-demand learning and development programs.
• The Thrive Global Wellness Program, a confidential Employee Assistance Program (EAP), a wellness app and one-on-one wellness coaching.
• Employee-led communities and programs, including Employee Resource Groups (ERGs), GoTo Gives, and charitable matching.

Company Description

Everyone deserves to work in a safe and secure environment. That's why we're passionate about delivering secure, remote workforce products and services that prioritize the protection of business assets, customer data, and employee information. We're committed to creating products that are not only secure but also user-friendly and accessible to all.

We thoughtfully infuse AI into our tools, leveraging it as a powerful resource to deliver genuine, practical value and address real security challenges. Join us and help create a future where security meets simplicity and AI-powered innovation.