Skill Compatibility Diagnostics
Live technical match evaluated against role architecture & expected skills.
Consider reviewing the missing technical prerequisites before submitting your application.
Your skills are processed strictly in-memory and never saved to a database.
About the Role
Squarespace is looking for a GRC Analyst to operate and continuously improve our governance, risk, and compliance programs within the Security organization. Our GRC team maintains audit readiness and supports the compliance frameworks — SOX, SOC 2, PCI DSS, NIST, and more — that protect Squarespace and the millions of customers who depend on us. We are a collaborative, detail-oriented team that moves deliberately and takes ownership of outcomes. You will work closely with Engineering, Legal, Finance, Product, and external auditors. This is an opportunity to modernize how GRC works — building automation, continuous monitoring, and data-driven reporting into programs that directly support revenue and customer trust.
This is a hybrid role working from our NYC office 3 days per week. You will report to the GRC Manager.
Key Technical Responsibilities
- check_circle Lead and support audits across SOX, SOC, PCI, and NIST — from scoping through reporting — while maintaining audit-ready documentation and tracking findings to closure.
- check_circle Evaluate control design and operating effectiveness, manage security risk assessments and exception records, and escalate overdue or material risks to the right partners.
- check_circle Conduct vendor security and privacy reviews, assess third-party control maturity, and track remediation through reassessment and closure.
- check_circle Respond to customer security questionnaires and partner assessments by coordinating timely, accurate responses across teams.
- check_circle Support data privacy audits and assessments covering GDPR, CCPA/CPRA, data retention, deletion, access rights, and third-party processing.
- check_circle Improve GRC operations through automation, integrations, AI-enabled workflows, and continuous compliance monitoring that reduce manual effort and strengthen audit readiness.
Prerequisites & Qualifications
- check 3+ years of experience in GRC, IT audit, security compliance, or privacy compliance, with demonstrated ability to manage audit activities end to end.
- check Proven experience leading or supporting complex compliance programs across frameworks such as SOX, SOC 1/2, PCI, NIST, or ISO — including scoping, control testing, issue management, and reporting.
- check Experience evaluating IT controls and translating requirements into clear, actionable expectations for both technical and non-technical teams.
- check Experience supporting vendor risk programs, including security due diligence and review of independent assurance reports.
- check Working knowledge of SaaS and cloud environments.
- check Experience using GRC or workflow platforms to maintain accurate records and drive repeatable processes.
About Squarespace Greenhouse Board
Verified hiring organization details.
Squarespace Greenhouse Board refers to the centralized recruitment and talent acquisition infrastructure utilized by Squarespace, a New York City-based technology company specializing in website building and hosting platforms. The board serves as the primary interface for managing the company's global hiring pipeline, candidate tracking, and talent operations, facilitating the recruitment of engineering, product, and design talent to support the company's integrated suite of web publishing tools and e-commerce solutions.