Governance, Risk And Compliance Analyst
US$135,000 – US$165,000 / yr base salary
Posted 4 Jun 2026
Advertised as “Governance, Risk & Compliance (GRC) Analyst”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 3–5 yrs
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
- Visa sponsorship
- Offered
| Base salary | US$135,000 – US$165,000 / yr |
|---|
CertificationsSecurity+, CISA, CRISC, CCSK, ISO 27001 Lead Implementer
Why Join Ivo?
Contracts are the oldest business technology in human history. They allow us to collaborate: they define what we promise each other, how we work together, and what happens when things go wrong.
Ivo builds AI products that helps companies like Meta, Uber, IBM, Intel, DoorDash, Mitsubishi Electric, and Coinbase solve their most difficult contracting problems. We think that large language models have created an opportunity to fundamentally change how businesses collaborate with each other.
At Ivo you will work on challenging problems with colleagues who have high standards for each other, move fast, and care deeply about their craft.
The Opportunity
Ivo is seeking a detail-oriented and proactive GRC Analyst to support the company's compliance, risk management, and security assurance initiatives. This role will play a key part in maintaining and enhancing Ivo's compliance programs, including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001.
The ideal candidate has experience supporting security audits, managing evidence collection, conducting risk assessments, maintaining policies and procedures, and partnering cross-functionally with engineering, IT, legal, HR, and business stakeholders.
This is a fully onsite role based out of Ivo's San Francisco headquarters to support close cross-functional collaboration with Security, Engineering, IT, and Operations teams.
What You'll Do
-
Support and coordinate Ivo's compliance programs including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001.
-
Assist with annual audits, surveillance audits, and customer security assessments.
-
Coordinate evidence collection and maintain audit readiness across teams.
-
Support and maintain Ivo's Vanta GRC platform and associated compliance workflows.
-
Monitor automated compliance evidence collection and control monitoring within Vanta.
-
Perform vendor and third-party risk assessments.
-
Support enterprise risk management and risk register maintenance.
-
Maintain and update security policies, standards, and procedures.
-
Support AI governance and responsible AI compliance initiatives.
What We're Looking
-
3–5 years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, or related field.