Startups · AI

Senior GRC Analyst - Central or Eastern time, US or Canada

Shift Technology · Canada - Remote; Canada - Toronto; US - Boston; US - Remote · Remote

← All jobs
About Shift Technology

Backed by Accel, Bessemer and General Catalyst.

About the role

As a Senior GRC Analyst, you will be a cornerstone of Shift’s security program, responsible for developing, maintaining, and assessing our integrated security and privacy management framework. You will manage our compliance with key industry standards, lead risk assessments, oversee our third-party security assurance program, and support TrustOps efforts for customer collateral, questions, contract reviews, and due diligence.

What they're looking for

  • 7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role
  • Bachelor’s Degree in a relevant field or equivalent work experience
  • Professional certifications such as CIPP/E, CIPP/US, CIPT CISA, CISM, CRISC, or CISSP are highly desirable
  • Direct experience of delivery in highly regulated industries, i.e financial services, healthcare
  • Direct experience managing or supporting formal audit and certification processes from start to finish
  • Deep knowledge of security and privacy frameworks is required (e.g., ISO 27001, ISO27701, SOC 2 Type II, HITRUST, NIST CSF)
More about this role

Shift delivers AI agents that transform insurers' most critical work. By combining deep industry expertise and unmatched data resources, Shift provides proven results that have earned the trust of hundreds of the world's leading insurers. Our insurance-grade AI is accurate, explainable, and secure—empowering human experts to move with unmatched speed, total confidence, and a renewed focus on the people they serve.

Your browser does not support the video tag.

Our culture is built on innovation, trust, and a drive to transform the insurance industry through our SaaS platform. We come from more than 50 different countries and cultures and together we are creating the future of insurance.

Learn more at www.shift-technology.com

As a Senior GRC Analyst, you will be a cornerstone of Shift’s security program, responsible for developing, maintaining, and assessing our integrated security and privacy management framework. You will manage our compliance with key industry standards, lead risk assessments, oversee our third-party security assurance program, and support TrustOps efforts for customer collateral, questions, contract reviews, and due diligence. This role is critical for ensuring...

Read the full posting on Shift Technology's site ↗

Technology - Software Engineering,...

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.