Analyst

ABOUT VEG

In 2014, VEG was born with a mission to help people and their pets when they need it most by challenging norms and fixing the ER experience. Since then, we’ve expanded rapidly, with hospitals nationwide open 24/7/365, and created an ER experience that focuses on what our pets and pet parents really need. We’ve done the same for our people (VEGgies), finding a way to say YES so they are empowered to achieve great things, grow in unexpected ways, and find a place where they truly belong.

We’re rethinking emergency care from every angle—from how we run our hospitals to how we support the people working inside them. That’s where our headquarters team comes in. Whether building technology to make our hospitals more efficient, recruiting and growing incredible VEGgies, or bringing our brand to life through marketing, our VQ (VEG Headquarters) team makes it all possible—ensuring our hospitals and people have everything they need to help pets and their families.

VEG is a 2025 and 2026 certified Great Place to Work®.

THE JOB

At VEG, we find a way to say YES—so our teams can move fast without cutting corners on trust. As a Senior Analyst on our Governance, Risk & Compliance team, you’ll be the hands-on force that keeps VEG compliant and audit-ready as we grow. You’ll assess the vendors and AI tools we bring in, keep our PCI and privacy evidence airtight, and turn our security standards into everyday practice—all with modern, AI-assisted tooling and a team that owns its outcomes. You’ll grow where you want to go, from strong execution into program ownership and beyond. If you sweat the details, close the loop without being asked, and want your work to protect people and their pets, we want you on our team.

WHAT YOU’LL DO

• Conduct third-party and AI tool risk assessments through our intake and triage process, and track remediation to closure.
• Collect and maintain evidence for PCI DSS and privacy compliance, keeping us continuously audit-ready.
• Document security controls, monitor their health, and support internal and external audits.
• Update policies, standards, and baselines, and track exceptions.
• Maintain the risk register and support quarterly risk reporting.
• Partner with control owners across IT, Engineering, and Legal to keep compliance moving.

WHAT YOU NEED

• 3+ years in GRC, IT audit, compliance, or a related security function (or equivalent experience).
• Working knowledge of at least one security or compliance framework (e.g., PCI DSS, NIST, SOC 2, or ISO 27001).
• Hands-on experience with a GRC or governance platform (e.g., Hyperproof, Archer, or OneTrust), or the ability to pick one up quickly.
• Strong documentation skills and a sharp eye for detail.