Analyst - GRC (Governance, Risk & Compliance)

Role Overview: As a Governance and Compliance Support at Amagi, your role is crucial in building sustainable governance and compliance practices. Your success in this role depends on your understanding of the company's vendor landscape and compliance requirements. Your focus will be on establishing repeatable internal compliance validation processes and conducting vendor security risk reviews. Key Responsibilities: - Support products in maintaining SOC2 compliance through regular internal assessments - Engage with vendors for routine security and risk reviews - Continuously monitor and score vendor risks - Monitor the effectiveness of security controls and identify deviations - Implement Amagi's Security Awareness Program - Manage governance documentation Qualification Required: - Basic understanding and working knowledge of AWS / GCP - Familiarity with security standards, policies, and processes - Knowledge of SOC2, audit, and compliance validation - Experience in conducting TPRM assessments - Strong documentation skills - Ability to collaborate across functions with Legal, IT, and Engineering - Analytical and problem-solving skills - Comfort with ambiguity and ability to shape early-stage processes Additional Details: Amagi is looking for a team player who is hands-on, innovative in cybersecurity risk management, and willing to learn the technical aspects of security. This role reports to the Director - GRC and involves supporting Third-Party Risk Management, Audit Readiness, and Evidence Collection, as well as Internal Governance and Risk Management. The desired outcomes in the next two years include establishing a sustainable vendor security risk management process, an internal compliance team, continuous monitoring and reporting of product risk posture, and effective implementation of security controls. The ideal candidate should have 1-3 years of experience in Vendor Risk Management and Compliance Review.,