Governance, Risk, and Compliance (GRC) Analyst

About Vibes

Vibes’ mobile-first platform creates personal, revenue-driving and long-term mobile engagement between consumers and the world-class brands they love. Industry leaders like Chipotle, Kohl’s and Polo Ralph Lauren use Vibes to grow customer relationships with relevant, high-volume mobile messaging and mobile wallet marketing on a global scale. Vibes enables marketers to seamlessly connect with their customers using a data-rich and API-packed solution that beautifully optimizes and unifies their SMS, MMS, RCS and Mobile Wallet campaigns. To learn more about Vibes, visit www.vibes.com. 

Security isn't just a checkbox at Vibes. It's part of what customers buy. Every questionnaire you answer and every audit you pass helps us win and keep business. As our GRC Analyst, you'll collect the evidence, test the controls, and give auditors and customers real confidence in how we protect their data.

You'll join a small, fast-moving GRC and vendor management team, working closely with the vendor operations side, which gathers evidence on applications and vendors for you to validate. Many of our processes are still being built, so you'll shape how compliance works here instead of just administering it. This role will report to the Senior Program Manager.

What you'll own:

Evidence and audits

• Collect and organize control evidence continuously, so audit season is a non-event
• Help coordinate internal and external audits and serve as the day-to-day contact for auditors
• Prepare regular control and audit status reports for leadership

Control testing and findings

• Test whether controls work as designed, and work with control owners to close gaps
• Maintain the finding registry and verify closure before anything is marked complete
• Run quarterly user access reviews, sample offboarding, and reconcile the app and laptop inventories against SSO, billing, and purchases

Vendor risk

• Review vendor risk assessments and recommend approval or follow-up before any contract is signed or renewed

Customer trust

• Draft responses to customer security questionnaires and the compliance sections of RFPs, flagging answers that need review
• Use and help improve our AI tool that pre-fills questionnaire responses, and keep the process behind it current

Policy

• Administer the policy lifecycle: review dates, version control, and attestation tracking

What success looks like:

• Audits that run smoothly because evidence is already organized and current
• Findings that get closed, and stay closed, because you verified them
• Questionnaires and RFP responses that go out accurate, on time, and faster each quarter 
• Control owners who see you as a helpful partner, not an auditor to dodge

You might be a fit if you:

• Have 2 years in audit, compliance, or governance, risk, and compliance (or equivalent)
• Have working knowledge of a recognized control framework and how evidence maps to it
• Have handled customer security questionnaires and/or RFP security sections end to end
• Have built or maintained a questionnaire answer library
• Are comfortable using AI tools to draft compliance answers, with review steps

Bonus points for: control testing experience (picking samples, judging whether evidence proves the control, writing up gaps), basic Smartsheet, or compliance platform experience.

How we work:

• Detail-obsessed. You catch the wrong date, the missing signature, and the evidence that doesn't match the control.
• Fearless about evidence. You're comfortable asking control owners anywhere in the business for proof, and you can tell when what you got doesn't answer the question.
• Objective and kind. You support the business while staying honest about whether a control passes. You raise concerns clearly and kindly, and escalate when needed.
• You spot problems early and arrive with a recommended solution, not just a flag.
• Self-directed and adaptable. You keep many threads moving, learn fast, and stay steady when priorities shift.
• Honest and reliable. You do what you say you'll do and treat people well, including customers.

Our Core Values:

• Respect, honesty, and integrity for all stakeholders     
• Always be learning
• Relentless focus on the customer                               
• Never be satisfied
• Create value                                                               
• Seek accountability and ownership

Compensation and Benefits

The base salary for this role is $75,000 - $80,000 annually. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills and certifications. Vibes offers employees a full slate of benefits including competitive salaries, options, medical, dental and vision coverage, short and long term disability, life insurance, 11 paid holidays, flexible vacation, commuter benefits, a 401(k) plan and match, and a paid parental leave program.

Equal Opportunity Employer 

Vibes is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. Reasonable accommodations will be made to meet the requirements of the Americans with Disabilities Act and will be provided as requested by candidates taking part in all aspects of the selection process.