Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 8 days ago

Governance, Risk, and Compliance (GRC) Analyst

Vibes6 open roles

Pay
$75,000 – $80,000 a year
Where
Chicago, IL (Hybrid)
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGovernance, Risk, and Compliance (GRC) AnalystVibes · Chicago, IL (Hybrid)

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Vibes's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted 8 days ago

The posting

About Vibes

Vibes’ mobile-first platform creates personal, revenue-driving and long-term mobile engagement between consumers and the world-class brands they love. Industry leaders like Chipotle, Kohl’s and Polo Ralph Lauren use Vibes to grow customer relationships with relevant, high-volume mobile messaging and mobile wallet marketing on a global scale. Vibes enables marketers to seamlessly connect with their customers using a data-rich and API-packed solution that beautifully optimizes and unifies their SMS, MMS, RCS and Mobile Wallet campaigns. To learn more about Vibes, visit www.vibes.com.

Security isn't just a checkbox at Vibes. It's part of what customers buy. Every questionnaire you answer and every audit you pass helps us win and keep business. As our GRC Analyst, you'll collect the evidence, test the controls, and give auditors and customers real confidence in how we protect their data.

You'll join a small, fast-moving GRC and vendor management team, working closely with the vendor operations side, which gathers evidence on applications and vendors for you to validate. Many of our processes are still being built, so you'll shape how compliance works here instead of just administering it. This role will report to the Senior Program Manager.

What you'll own:

Evidence and audits

  • Collect and organize control evidence continuously, so audit season is a non-event
  • Help coordinate internal and external audits and serve as the day-to-day contact for auditors
  • Prepare regular control and audit status reports for leadership

Control testing and findings

  • Test whether controls work as designed, and work with control owners to close gaps
  • Maintain the finding registry and verify closure before anything is marked complete
  • Run quarterly user access reviews, sample offboarding, and reconcile the app and laptop inventories against SSO, billing, and purchases

Vendor risk

  • Review vendor risk assessments and recommend approval or follow-up before any contract is signed or renewed

Customer trust

  • Draft responses to customer security questionnaires and the compliance sections of RFPs, flagging answers that need review
  • Use and help improve our AI tool that pre-fills questionnaire responses, and keep the process behind it current

Policy

  • Administer the policy lifecycle: review dates, version control, and attestation tracking

What success looks like:

  • Audits that run smoothly because evidence is already organized and current
  • Findings that get closed, and stay closed, because you verified them
  • Questionnaires and RFP responses that go out accurate, on time, and faster each quarter
  • Control owners who see you as a helpful partner, not an auditor to dodge

You might be a fit if you:

  • Have 2 years in audit, compliance, or governance, risk, and compliance (or equivalent)
  • Have working knowledge of a recognized control framework and how evidence maps to it
  • Have handled customer security questionnaires and/or RFP security sections end to end
  • Have built or maintained a questionnaire answer library
  • Are comfortable using AI tools to draft compliance answers, with review steps

Bonus points for: control testing experience (picking samples, judging whether evidence proves the control, writing up gaps), basic Smartsheet, or compliance platform experience.

How we work:

  • Detail-obsessed. You catch the wrong date, the missing signature, and the evidence that doesn't match the control.
  • Fearless about evidence. You're comfortable asking control owners anywhere in the business for proof, and you can tell when what you got doesn't answer the question.
  • Objective and kind. You support the business while staying honest about whether a control passes. You raise concerns clearly and kindly, and escalate when needed.
  • You spot problems early and arrive with a recommended solution, not just a flag.
  • Self-directed and adaptable. You keep many threads moving, learn fast, and stay steady when priorities shift.
  • Honest and reliable. You do what you say you'll do and treat people well, including customers.

Our Core Values:

  • Respect, honesty, and integrity for all stakeholders
  • Always be learning
  • Relentless focus on the customer
  • Never be satisfied
  • Create value
  • Seek accountability and ownership

Compensation and Benefits

The base salary for this role is $75,000 - $80,000 annually. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills and certifications. Vibes offers employees a full slate of benefits including competitive salaries, options, medical, dental and vision coverage, short and long term disability, life insurance, 11 paid holidays, flexible vacation, commuter benefits, a 401(k) plan and match, and a paid parental leave program.

Equal Opportunity Employer

Vibes is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. Reasonable accommodations will be made to meet the requirements of the Americans with Disabilities Act and will be provided as requested by candidates taking part in all aspects of the selection process.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Vibes's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Vibes's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Vibes's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.