Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 7 hours ago

GRC Automation Analyst

Grammarly71 open roles

Pay
€76,000 – €106,000 a year
Where
Hub - Berlin
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGRC Automation AnalystGrammarly · Hub - Berlin

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Grammarly's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.0% of postings close within 7 days. Measured by our own scanner across the market. Grammarly postings stay open a median of 31 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.5%3 days
  3. 8.0%7 days
  4. 14.9%14 days
  5. 34.0%30 days
This job: posted 7 hours ago

Grammarly median: 31 days open

The posting

Superhuman offers a dynamic hybrid working model for this role. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that helps foster trust, innovation, and a strong team culture.

ABOUT SUPERHUMAN

Grammarly is now part of Superhuman, the AI productivity platform on a mission to unlock the superhuman potential in everyone. The Superhuman suite of apps and agents brings AI wherever people work, integrating with over 1 million applications and websites. The company’s products include Grammarly’s writing assistance, Superhuman Docs’s collaborative workspaces, Mail’s inbox management, and Go, the proactive AI assistant that understands context and delivers help automatically. Founded in 2009, Superhuman empowers over 40 million people, 50,000 organizations, and 3,000 educational institutions worldwide to eliminate busywork and focus on what matters. Learn more at superhuman.com http://superhuman.com/.

THE OPPORTUNITY

We’ve consolidated separate compliance programs (Grammarly, Coda, Superhuman Mail, and Superhuman Go) into a single program. We’re rapidly replacing the point-in-time approaches with continuous, automated, code-defined evidence, and this role continues to build on that.

The job is to automate your way out of the manual toil: our GRC automation platform is the evidence-automation backbone, agentic systems (Claude Code and similar) are the force multiplier, and GitHub is where the program lives as code. If your instinct on seeing a manual control-testing process is to turn it into a repeatable, automated pipeline, this role is for you.

What You Will Do:

- Automate evidence collection. Configure and operate the GRC automation platform: wire up data sources, build evidence plugins, scope data sets, author analysis rules, and stand up continuous monitoring operations, replacing screenshot-and-upload workflows with automated collectors mapped to controls.

- Automate GRC workflows and run compliance as code. Use Claude Code (or similar) and MCPs for evidence requests, control mapping, gap analysis, vendor reviews, and reporting; build and curate the team’s agent harness; and manage policies, control definitions, and automation in GitHub through branches, pull requests, and review.

- Design control testing and drive remediation. Instrument testing across SOC 2, ISO 27001, ISO 27017/27018, ISO 27701, PCI DSS, and ISO 42001 for continuous assurance rather than point-in-time snapshots, and work with control owners and engineering to close gaps with automated evidence behind every finding.

What Ramping Up Looks Like:

You will be configuring our GRC automation platform, not just clicking through it, within your first few weeks. In your first 90 days, we’d expect you to learn the platform configuration, ship your first automated evidence collectors, retire a batch of manual screenshot evidence, and get at least one agent-assisted workflow running end-to-end.

Why This Role:

- You’ll design the automation architecture for compliance across four products, rather than maintaining an existing checklist.

- You get the mandate and the tooling to retire manual evidence collection: a GRC automation platform, agentic AI, and compliance-as-code.

- We actually run LLMs and AI agents in production GRC workflows today. This is how the team operates day-to-day.

- Small team, high ownership, and a direct line to Legal and Engineering leadership. You’ll shape the program, not just sustain it.

QUALIFICATIONS

- 5+ years in compliance, GRC, or IT audit, hands-on with the frameworks above (SOC 2, ISO 27001, PCI DSS, and adjacent).

- 1+ year using agentic AI systems (Claude Code, Codex, etc.) to do real compliance work, with automation you have delivered, not just prototypes.

- Comfortable in GitHub: repos, branches, pull requests, and code review. CI/CD familiarity is a strong plus.

- Fast on new tooling. You can pick up a GRC automation platform and be productive in weeks, configuring it directly rather than relying on others to do so.

- Deep GRC fluency: control design, evidence, risk, and how auditors actually think.

- Working knowledge of cloud (AWS/Azure/GCP): IAM, compute, storage, networking, and security controls, because that’s where the evidence lives.

- Systems thinker who prefers to automate repetitive manual work rather than repeat it.

Nice to Have:

- Reads APIs, JSON, and logs comfortably; scripting (Python, bash, TypeScript).

- Prior hands-on experience with a GRC automation platform (Vanta, Drata, or similar).

- Scripting/light coding and API integration experience.

- Certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar.

- AI governance, AI risk management, or ISO 42001 exposure.

- Background in a technology, SaaS, or engineering-adjacent environment.

SUPPORT FOR YOU, PROFESSIONALLY AND PERSONALLY

- Professional growth: We believe that autonomy and trust are key to empowering our team members to do their best, most innovative work in a way that aligns with their interests, talents, and well-being. We also support professional development and advancement with training, coaching, and regular feedback.

- A connected team: Superhuman builds a product that helps people connect, and we apply this mindset to our own team. Our remote-first hybrid model enables a highly collaborative culture supported by our values. We work to foster belonging among team members in a variety of ways. This includes our employee resource groups, Superhuman Circles, which promote connection among those with shared identities including BIPOC and LGBTQIA+ https://www.grammarly.com/blog/supportive-workplace-for-lgbtqia/ team members, women, and parents. We also celebrate our colleagues and accomplishments with global, local, and team-specific programs.

- Comprehensive benefits for candidates based in Germany: Superhuman offers all team members competitive pay along with a benefits package encompassing life care (including mental health care and risk benefits) and ample and defined time off. We also offer support to set up a home office, wellness and pet care stipends, learning and development opportunities, and more.

- Relocation Support: Superhuman provides comprehensive relocation support to make your move to Berlin seamless. Our package includes visa assistance, destination services to help you and your family settle in comfortably, and a relocation bonus to cover additional expenses, such as temporary housing.

WE ENCOURAGE YOU TO APPLY

At Superhuman, we value our differences, and we encourage all to apply. Superhuman is an equal-opportunity company. We do not discriminate on the basis of race or ethnic origin, religion or belief, gender, disability, sexual identity, or age.

For more details about the personal data Superhuman collects during the recruitment process, for what purposes, and how you can address your rights, please see the Superhuman Data Privacy Notice for Candidates here https://superhuman.com/media-resources/candidate-data-privacy.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Grammarly's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Grammarly's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Grammarly's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.