Everlaw
Governance, Risk, Compliance & Trust Analyst
Oakland, California, United States · Senior · Full-time
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~45% per draw at Level III). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Sitting at the intersection of customer trust, compliance operations, audit readiness, and vendor risk, you'll translate Everlaw's security posture into clear, audit-ready, and customer-facing deliverables while streamlining how compliance work gets done.
- This is a full-time, exempt position based in our Oakland, CA office with a hybrid work schedule: in office M/W/Th with the option to work from home on Tu/Fr.
Responsibilities
- Drive audit readiness across core compliance frameworks (FedRAMP, SOC 2, ISO 27001/27017/27018) by organizing evidence, maintaining documentation quality, and partnering with control owners to resolve gaps.
- Own end-to-end customer trust workflows and security questionnaires, researching technical answers and synthesizing evidence into clear, customer-ready responses.
- Maintain and improve security training programs, ensuring content stays current, audit-ready, and aligned with policies and regulatory frameworks like FedRAMP and CJIS.
- Support governance workflows and public sector initiatives, including security impact analyses, change-related compliance reviews, and the ongoing operation of the Public Sector Clearance Program.
- You bring a track record of using operational metrics, dashboards, or workflow data to maintain SLAs and streamline compliance processes.
Requirements
- You have 5+ years of experience working as an individual contributor within a Governance, Risk, Compliance, and Trust (GRCT) team.
- You have strong working knowledge of customer trust operations, risk management, and the control evidence required to support audits such as SOC 2, FedRAMP, or ISO 27001.
- You can independently research technical topics, navigate ambiguity, and produce concise, clear written deliverables for both technical and non-technical stakeholders.
- You are authorized to work in the United States.
- We do not believe in the 'perfect' candidate and encourage you to apply if you feel you can bring value to our team.
Compensation
- 401(k) plan with company matching of up to 4% of eligible annual compensation
- Four "Everlawlidays" (additional paid company-wide days off) per year
Benefits
- Comprehensive medical, dental, and vision coverage
- Flexible Spending Accounts for health and dependent care expenses
- Membership to Modern Health to support mental health and wellness
- Paid parental leave
- Company-sponsored life and disability insurance
- Competitive equity grants, so you share in Everlaw's long-term growth
- 17 paid vacation days, 11 federal holidays, and paid sick leave
- Annual allocation for learning & development and relevant professional membership dues
- Monthly home internet reimbursement, plus a stipend for your desk setup
Company info
- This work protects Everlaw's people, customers, and business while making it possible for teams to move quickly without compromising the standards the industry demands.
- We use Gem as part of our hiring and/or promotional processes.
Visa & Work Authorization
- You are authorized to work in the United States.
This listing is sourced directly from Everlaw's careers page and normalized into a canonical job model.