You.com
Governance, Risk, and Compliance Analyst
San Francisco (Hybrid) · Full-time
Work authorization required$150k-$180kDetected 27 days ago
RESTData AnalysisLLMsAgentic AIComplianceProcurementHIPAAResearchCommunicationCollaborationOrganizational Skills
About the role
- We're looking for a GRC Analyst to join our growing Security, IT, and Privacy function.
- You'll be the backbone of all the compliance work at the intersection of Engineering, Legal, and Product.
- Our goal is simple: earn and keep the trust of our customers.
Responsibilities
- Own and manage compliance programs across frameworks including SOC 2, ISO 27001, GDPR, CCPA, HIPAA, and FedRAMP
- Leverage AI and other tools to deliver metrics that stakeholders can consume and understand
- manage the due diligence lifecycle for new and existing partners
- Assist with building and maintaining compliance policies, procedures, and supporting documentation for security and compliance
- Support Privacy-by-Design reviews for new product features and data practices
- Track open compliance items and proactively drive them to closure across stakeholders
- The chance to collaborate with a team at the forefront of AI research
Requirements
- 3-5 years of experience in GRC, Information Security compliance, or a related field
- Hands-on experience with SOC 2 or ISO 27001 audits, including evidence collection and gap assessments
- Familiarity with privacy regulations: GDPR, CCPA, and ideally emerging AI regulatory frameworks (EU AI Act, etc.)
Nice to have
- Experience at an AI or search company
- Familiarity with data broker or data licensing compliance
- CISA, CISM, or CRISC
- Experience managing vendor risk assessments and third-party due diligence processes
- Strong written and verbal communication skills.
- You can explain compliance requirements to engineers and legal concepts to product managers
- Comfortable working independently in a fast-paced environment with limited process overhead
Skills
- Translate regulatory and contractual requirements into actionable controls and processes
- Monitor the evolving regulatory landscape (especially AI-specific regulations) and flag relevant obligations
Compensation
- is determined by multiple factors assessed during the interview process, with the final offer reflecting these considerations.
Benefits
- Flexible PTO with U.S. holidays observed and a week shutdown in December to rest and recharge*
- A competitive health insurance plan covers 100% of the policyholder and 75% for dependents*
- 12 weeks of paid parental leave in the US*
- $500 work-from-home stipend to be used up to a year of your start date*
- $1,200 per year Health & Wellness Allowance to support your personal goals*
- Certain perks and benefits are limited to full-time employees only
- $600 technology stipend to support a portion of our hybrid/remote team's cell phone and internet expenses*
Company info
- At You.com, we are building the AI Search Infrastructure that powers modern AI systems. Our goal is to create the trusted knowledge layer that agents, applications, and enterprises rely on to retrieve real-time, accurate, and citation-backed information.
- Our platform combines proprietary vertical indexes with LLM-optimized retrieval systems to power AI agents, applications, and enterprise workflows. We are solving hard problems across search, large language models, and large-scale infrastructure to make AI systems more reliable, transparent, and useful.
- Our team includes engineers, researchers, product builders, and operators who care about solving meaningful problems and delivering real-world impact. Whether you are improving core infrastructure, shaping product experiences, or helping bring new AI capabilities to market, your work will help define how modern AI finds and uses knowledge.
- The Role
- This role will build and maintain the compliance programs as part of the security team.
- At You.com, we are building the AI Search Infrastructure that powers modern AI systems.
- Our goal is to create the trusted knowledge layer that agents, applications, and enterprises rely on to retrieve real-time, accurate, and citation-backed information.
- Our platform combines proprietary vertical indexes with LLM-optimized retrieval systems to power AI agents, applications, and enterprise workflows.
- We are solving hard problems across search, large language models, and large-scale infrastructure to make AI systems more reliable, transparent, and useful.
- Our team includes engineers, researchers, product builders, and operators who care about solving meaningful problems and delivering real-world impact.
- Whether you are improving core infrastructure, shaping product experiences, or helping bring new AI capabilities to market, your work will help define how modern AI finds and uses knowledge.
Equal opportunity
- Please let us know if you require accommodation for any portion of the recruitment and hiring process.
Visa & Work Authorization
- We will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's Form I-9 to confirm work authorization. (English/Spanish: E-Verify Participation
Apply directly at You.com →Create a free account for alerts like thisView You.com immigration profile
This listing is sourced directly from You.com's careers page and normalized into a canonical job model.