Governance, Risk, Compliance & Trust Analyst

Governance, Risk, Compliance & Trust Analyst on Everlaw's IT & Security team, independently running compliance, customer trust and vendor risk work. The role is hybrid from the Oakland office, in person Monday, Wednesday and Thursday.

The analyst drives audit readiness for FedRAMP, SOC 2 and ISO 27001, 27017 and 27018 by organising evidence and closing gaps with control owners, owns customer security questionnaires and trust workflows, assesses third-party vendors with procurement, legal and security engineering, keeps security training current for frameworks including CJIS, and supports security impact analyses and the Public Sector Clearance Program. Everlaw wants five or more years as an individual contributor in a GRC and trust team, hands-on audit evidence work, and experience with GRC tools and trust portals. Visa sponsorship is not offered.