Squarespace

Actively Hiring

Grc Analyst

New York City, USA

Full-time

Role Overview

Squarespace is looking for a GRC Analyst to operate and continuously improve our governance, risk, and compliance programs within the Security organization.

About Squarespace

Squarespace is a design-driven platform helping entrepreneurs build brands and businesses online. We empower millions of customers in more than 200 countries and territories with all the tools they need to create an online presence, build an audience, monetize, and scale their business.

Key Responsibilities

Lead and support audits across SOX, SOC, PCI, and NIST
Evaluate control design and operating effectiveness, manage security risk assessments and exception records
Conduct vendor security and privacy reviews, assess third-party control maturity
Respond to customer security questionnaires and partner assessments
Support data privacy audits and assessments covering GDPR, CCPA/CPRA, data retention, deletion, access rights
Improve GRC operations through automation, integrations, AI-enabled workflows

Requirements & Eligibility

3+ years of experience in GRC, IT audit, security compliance, or privacy compliance
Proven experience leading or supporting complex compliance programs across frameworks such as SOX, SOC 1/2, PCI, NIST, or ISO
Experience evaluating IT controls and translating requirements into clear, actionable expectations
Experience supporting vendor risk programs, including security due diligence
Working knowledge of SaaS and cloud environments
Experience using GRC or workflow platforms

Required Skills & Tech

SOXSOC 2PCI DSSNISTISOGDPRCCPA/CPRAGRC