Zip Co

GRC Analyst

Zip Co$95K — $150K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in a related field
  • 2+ years of experience in GRC, information security consulting, cybersecurity risk, audits, or similar roles
  • Strong written and verbal communication skills with both technical and non-technical stakeholders
  • Familiarity with frameworks like SOC 1, SOC 2, ISO 27001, and others
  • Understanding of information security fundamentals for cloud software systems

Responsibilities

  • Drive and perform compliance-related activities like user access reviews and internal audits
  • Lead discussions and curate responses for security questionnaires from customers
  • Guide internal control owners to comprehend requirements and operationalize controls
  • Collaborate with stakeholders and external auditors for third-party audits
  • Develop and maintain security policies, ensuring compliance with regulations

Benefits

  • Start-up equity
  • 100% health, vision & dental coverage options
  • Catered meals throughout the day
  • Flexible PTO
  • ClassPass membership
  • Monthly commuter benefit
  • Team building events & happy hours
  • Home office stipend
  • Phone/internet reimbursement
  • Paid parental leave
  • Fertility stipend
  • 401k plan
  • Unlimited AI token usage
Full Job Description
Your Role

The Security & Compliance team at Zip is committed to providing a high level of security assurance to customers, aligning security goals with business objectives and customer requirements. As a GRC Analyst at Zip, you'll be a key driver for ensuring the success of compliance programs at a fast-growing company. Your contributions will be pivotal to the overall growth and competitive edge of Zip's GRC program. You'll ensure we can securely and compliantly build new features, help design and scale the compliance programs that power our expansion. You'll help maintain our existing SOC and ISO certifications while supporting new certifications, from AI products to entry into new markets like the EU and highly-regulated industries.

Responsibilities
  • Drive and perform periodic compliance-related activities, such as user access reviews, internal audits, and vendor risk assessments
  • Lead conversations and curate responses for customers' security, compliance, and governance teams in due diligence and security questionnaires
  • Guide internal control owners and stakeholders to understand requirements, take accountability, and operationalize their controls.
  • Collaborate with internal stakeholders and external auditors to support third party audits including SOC 1, SOC 2, and ISO 27001
  • Develop, maintain, and lead the adoption of security policies, standards, and guidelines to ensure compliance with applicable regulatory requirements


Required Qualifications
  • Bachelor's degree in a related field
  • 2+ years of experience in GRC, information security consulting, cybersecurity risk, audits, or similar roles
  • Strong written and verbal communication skills with both technical and non-technical stakeholders
  • Familiarity with and participation in one or more of the following frameworks: SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, FedRAMP
  • Familiarity with information security fundamentals for cloud software systems


Preferred Qualifications
  • Professional certifications in information security are a plus but not required


The salary range for this role is $95,000 - $150,000. The salary for this position is determined based on a variety of job-related factors that may include location, relevant experience, education, or particular skills and expertise.

Perks & Benefits

At Zip, we're committed to providing our employees with everything they need to do their best work.
  • Start-up equity
  • 🦷 100% health, vision & dental coverage options
  • Catered breakfast, lunch, & dinner
  • Flexible PTO
  • 🏋 ClassPass membership
  • 🚍 Monthly commuter benefit
  • 🚠 Team building events & happy hours
  • Home office stipend
  • 🛜 Phone/internet reimbursement
  • Paid parental leave
  • 🧒🧒 Fertility stipend
  • 401k plan
  • Unlimited AI token usage


We're looking to hire Zipsters and that means hiring people who take ownership, communicate openly, have an underdog mindset, and are excited to increase the pace of innovation for every business in the world. We encourage all candidates to apply even if your experience doesn't exactly match up to our job description. We are committed to building a diverse and inclusive workspace where everyone (regardless of age, religion, ethnicity, gender, sexual orientation, and more) feels like they belong. We look forward to hearing from you!

About Zip Co

Zip Co Limited previously known as ZipMoney Limited is an Australian public limited financial technology company. The company was founded in 2013 and is headquartered in Sydney. In September 2020, Zip acquired the US-based ‘Buy Now, Pay Later’ company Quadpay to grow its American footprint. The company now has operations in Australia, Canada, Czech Republic, India, Mexico, New Zealand, the Philippines, Poland, Saudi Arabia, Singapore, South Africa, UAE, the United Kingdom and the USA. It currently has around 81,000 retail partners and over 9,900,000 customers. As of March 2021, Zip Co's market cap was $5.83 billion.
Learn more about Zip Co

Similar Jobs

More Jobs at Zip Co

  • Zip Co
    Solutions Director
    $120K — $150K *
    Toronto, ON M3C 0E3
    Enterprise Technology
    In-Person
  • Zip Co
    Solutions Director
    $212K — $262K *
    New York, NY 10025 (New York County)
    Enterprise Technology
    In-Person
  • Zip Co
    Solutions Director
    $212K — $262K *
    San Francisco, CA 94112 (San Francisco County)
    Enterprise Technology
    In-Person
  • Zip Co
    Head of Business Data
    $250K — $300K *
    New York, NY 10025 (New York County)
    Enterprise Technology
    In-Person
  • Zip Co
    Head of Business Data
    $250K — $300K *
    San Francisco, CA 94112 (San Francisco County)
    Enterprise Technology
    In-Person

More Information Technology Jobs

Find similar GRC Analyst jobs: