In this role you will support IXL's internal cybersecurity governance, compliance, and audit program by gathering evidence, performing vendor risk assessments, conducting risk assessments, and maintaining audit-ready documentation. You will also contribute to security awareness training and phishing simulation programs and cross-train with and support other members of the security team. This role is a great fit for someone early in their GRC career who is eager to build hands-on experience across multiple compliance frameworks and risk management disciplines.
This position requires you to be in our San Mateo, CA, headquarters office.
WHAT YOU'LL BE DOING- Support internal and external audits by gathering, organizing, and maintaining evidence in a timely and accurate manner
- Support the operation, implementation, and administration of the team's GRC platform, including compliance documentation management and reviews, attestations, workflow configuration, user management, and data integrity maintenance
- Perform vendor risk assessments to evaluate third-party security posture and compliance alignment
- Conduct risk assessments and contribute to maintaining the organization's risk register and open findings tracking
- Support security awareness training programs including content coordination, participation tracking, and reporting
- Assist with planning, execution, and results reporting for phishing simulation campaigns
- Map and cross-reference controls across multiple compliance frameworks such as SOC2, PCI-DSS, GovRAMP, and NIST
- Maintain audit-ready documentation, policy version control, and evidence repositories year-round
- Track and manage security exceptions through their full lifecycle including intake, approval, and expiration
- Assist identifying, building and reporting on GRC-specific metrics for leadership
- Cross-train with and support other members of the security team as needed
WHAT WE'RE LOOKING FOR- Bachelor's degree, preferably in Computer Science, Cybersecurity, Information Systems, or a related field
- 1-3 years of experience in GRC, IT audit, compliance, risk management, or a related field
- Familiarity with common compliance frameworks such as SOC2, PCI-DSS, NIST, ISO 27001, or GovRAMP
- Previously supported audits pertaining to SOC2 Type 2 and/or PCI-DSS (Level 1 or hands-on SAQs)
- Experience with or exposure to vendor risk assessment processes and third-party risk management
- Strong attention to detail with the ability to organize and manage documentation and evidence across multiple workstreams
- Excellent written and verbal communication skills with the ability to work across technical and non-technical teams
- Comfort working in a fast-paced environment and managing multiple priorities simultaneously
- Relevant certifications such as CompTIA Security+, CISA, or GRCP are a plus
- Familiarity with GRC platforms like Vanta or Auditboard, or ticketing tools such as Jira is a plus
Our salary ranges are determined by role, level, and location. The base salary range for this full-time position is $80,000 to $105,000 + benefits. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position. Individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
