GRC Compliance Analyst

Compliance Analyst

Security at GoTo

Everyone deserves to work in a safe and secure environment. That's why we're passionate about delivering secure, remote workforce products and services that prioritize the protection of business assets, customer data, and employee information. We're committed to creating products that are not only secure but also user-friendly and accessible to all. We thoughtfully infuse AI into our tools, leveraging it as a powerful resource to deliver genuine, practical value and address real security challenges. Join us and help create a future where security meets simplicity and AI-powered innovation.

Your Day to Day

The Compliance Analyst sits within the Security Governance, Risk, and Compliance (GRC) team, reporting to the Director of GRC in the CISO org. You'll own audit coordination, control testing, and risk assessment work while actively pushing how assurance gets done through technology and automation.

As a GRC Compliance Analyst, you would be working on:

• Coordinating audits across ISO 27001, SOC 2, PCI-DSS, HIPAA, NIS2, SOX, and C5, including managing auditor relationships, driving evidence collection, and tracking remediation activities to completion.
• Performing control assessments and testing across technical and administrative domains, partnering with engineering and security teams to evaluate control design and effectiveness.
• Partnering with Engineering, Security, IT, and Product stakeholders to understand technical architectures and translate them into audit-ready control narratives.
• Leveraging AI tools, automation, and emerging technologies to streamline evidence collection, control testing, and reporting activities.
• Administering and enhancing GRC platforms while developing metrics and dashboards that provide visibility into compliance posture and control effectiveness.

What We're Looking For

As a GRC Compliance Analyst, your background will look like:

• 3+ years of experience in information security compliance, audit, or risk management within a technology environment.
• Strong understanding of cloud architecture, IAM, infrastructure, and SDLC controls, enabling effective collaboration and communication with technical teams.
• Experience working with one or more compliance frameworks, such as ISO 27001, SOC 2, PCI-DSS, HIPAA, NIST 800-53, and NIS2.
• Strong audit communication skills: you know how to manage auditors, push back when evidence requests are out of scope, and defend a control position when you're right.
• Interest in leveraging technology and AI tools to improve productivity and streamline compliance activities.

Bonus Qualifications

• Experience with compliance automation, continuous monitoring initiatives, or GRC platform development.
• Experience with platforms such as Thoropass, AuditBoard, or Drata.
• Experience building AI-driven workflows or automations that reduce compliance toil.
• Experience integrating GRC tooling with engineering, cloud, identity, or monitoring platforms.
• Experience implementing continuous assurance capabilities.

What We Offer

At GoTo, we care about helping our people succeed at work and feel supported in life. Our employee benefits and programs are designed to support your well-being, growth, and sense of belonging. Here's what you can expect as part of our team:

• Comprehensive health benefits
• Generous paid time off, including paid holidays, volunteer days, quarterly self-care days, and company-designated no-meeting days
• Tuition reimbursement and access to instructor-led and on-demand learning and development programs
• The Thrive Global Wellness Program, a confidential Employee Assistance Program (EAP), a wellness app and one-on-one wellness coaching
• Employee-led communities and programs, including Employee Resource Groups (ERGs), GoTo Gives, and charitable matching

We work hard to create an environment where everyone feels welcome, respected, and able to contribute. Building a culture of belonging isn't just something we talk about - it's part of how we work every day.

Specific benefits and offerings may vary by country in line with local regulations and market practices.

At GoTo, you'll find the flexibility, resources, and support you need to thrive—at work, at home, and everywhere in between. You'll work towards a shared goal with an open-minded, cohesive team that's greater than the sum of its parts. We're committed to creating an inclusive space for everyone, because we know unique perspectives make us a stronger company and community. Join us and be part of a company that invests in your future, where together we'll Be Real, Think Big, Move Fast, Keep Growing, and stay Customer Obsessed. Learn more.