Ivo Inc.

Governance, Risk & Compliance (GRC) Analyst

San Francisco

Sponsorship not specified$135k-$165kDetected 48 days ago

AWSGCPCloud PlatformsCybersecurityComplianceCanvaCommunicationCollaboration

About the role

This role will play a key part in maintaining and enhancing Ivo's compliance programs, including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001.
The ideal candidate has experience supporting security audits, managing evidence collection, conducting risk assessments, maintaining policies and procedures, and partnering cross-functionally with engineering, IT, legal, HR, and business stakeholders.

Support and coordinate Ivo's compliance programs including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001.
Coordinate evidence collection and maintain audit readiness across teams.
Support and maintain Ivo's Vanta GRC platform and associated compliance workflows.
Perform vendor and third-party risk assessments.
Support enterprise risk management and risk register maintenance.
Maintain and update security policies, standards, and procedures.
Support AI governance and responsible AI compliance initiatives.
Ivo is seeking a detail-oriented and proactive GRC Analyst to support the company's compliance, risk management, and security assurance initiatives.

3-5 years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, or related field.
Hands-on experience supporting SOC 2 Type II, ISO 27001, CSA STAR, and in-depth knowledge of ISO/IEC 42001.
Experience administering or working extensively with Vanta or similar GRC/compliance automation platforms.
Experience managing and maintaining a customer-facing Trust Center, including security documentation, compliance artifacts, sub-processor disclosures, and customer assurance materials.
Strong understanding of information security principles and common security controls.
Experience with audits, evidence management, and customer security reviews.

Experience working at a SaaS or AI company.
Familiarity with GDPR, CCPA, privacy regulations, and third-party risk management.
Knowledge of cloud environments such as GCP, AWS, or Azure.
Strong attention to detail and accountability.
Collaborative mindset with strong cross-functional communication skills.
Ability to translate compliance requirements into practical operational processes.
Interest in emerging AI governance and security frameworks.
Self-starter mentality with a continuous improvement mindset

Assist with annual audits, surveillance audits, and customer security assessments.

Ivo is an equal opportunity employer and values diversity at all levels of the organization. We celebrate diversity and are committed to creating an inclusive environment for all employees.
Ivo is an equal opportunity employer and values diversity at all levels of the organization.
We celebrate diversity and are committed to creating an inclusive environment for all employees.

This listing is sourced directly from Ivo Inc.'s careers page and normalized into a canonical job model.