About this role
Squarespace is looking for a GRC Analyst to operate and continuously improve our governance, risk, and compliance programs within the Security organization. Our GRC team maintains audit readiness and supports the compliance frameworks - SOX, SOC 2, PCI DSS, NIST, and more - that protect Squarespace and the millions of customers who depend on us. We are a collaborative, detail-oriented team that moves deliberately and takes ownership of outcomes. You will work closely with Engineering, Legal, Finance, Product, and external auditors. This is an opportunity to modernize how GRC works - building automation, continuous monitoring, and data-driven reporting into programs that directly support revenue and customer trust.
This is a hybrid role working from our NYC office 3 days per week. You will report to the GRC Manager.
You'll Get To...
- Lead and support audits across SOX, SOC, PCI, and NIST - from scoping through reporting - while maintaining audit-ready documentation and tracking findings to closure.
- Evaluate control design and operating effectiveness, manage security risk assessments and exception records, and escalate overdue or material risks to the right partners.
- Conduct vendor security and privacy reviews, assess third-party control maturity, and track remediation through reassessment and closure.
- Respond to customer security questionnaires and partner assessments by coordinating timely, accurate responses across teams.
- Support data privacy audits and assessments covering GDPR, CCPA/CPRA, data retention, deletion, access rights, and third-party processing. &l...
More roles at Squarespace