← All roles

Governance, Risk, Compliance & Trust Analyst

Everlaw· IT & Security
Apply on company site
Hybrid (Oakland, CA)$140k - $178kfull-timePosted 3mo ago

About the role

Full-time exempt role focused on driving trust, compliance, and risk workstreams to scale Everlaw responsibly, including audit readiness, customer trust workflows, third-party risk, security training, and governance for public sector initiatives.

Responsibilities

  • Drive audit readiness across FedRAMP, SOC 2, ISO 27001/27017/27018 by organizing evidence, maintaining documentation quality, and coordinating with control owners to resolve gaps.
  • Own end-to-end customer trust workflows and security questionnaires, researching technical answers and synthesizing evidence into clear, customer-ready responses.
  • Conduct third-party security and vendor risk evaluations, assessing documentation, controls, and architecture against Everlaw standards in partnership with Procurement, Legal, and Security Engineering.
  • Maintain and improve security training programs, ensuring content stays current, audit-ready, and aligned with policies and regulatory frameworks like FedRAMP and CJIS.
  • Support governance workflows and public sector initiatives, including security impact analyses, change-related compliance reviews, and operation of the Public Sector Clearance Program.

Qualifications

  • 5+ years of experience as an individual contributor within a Governance, Risk, Compliance, and Trust (GRCT) team.
  • Strong knowledge of customer trust operations, risk management, and control evidence for audits such as SOC 2, FedRAMP, or ISO 27001.
  • Experience leading customer security questionnaire workflows and working with GRC tools, trust portals, or evidence repositories.
  • Track record of using operational metrics, dashboards, or workflow data to maintain SLAs and streamline compliance processes.
  • Ability to independently research technical topics, navigate ambiguity, and produce concise written deliverables for technical and non-technical stakeholders.
  • Authorized to work in the United States (no current visa sponsorship for this role).

Skills

Required:GRC program managementAudit readinessCustomer security questionnairesVendor risk assessments
Nice to have:Security training

Benefits

  • Comprehensive medical, dental, and vision coverage
  • Flexible Spending Accounts for health and dependent care
  • Membership to Modern Health for mental health and wellness
  • Paid parental leave
  • Company-sponsored life and disability insurance
  • Competitive equity grants
  • 401(k) with company matching up to 4%
  • 17 paid vacation days, 11 federal holidays, paid sick leave
  • Four Everlawlidays per year
  • Annual allocation for learning & development and professional membership dues
  • Hybrid work with regular WFH days
  • Monthly home internet reimbursement and desk setup stipend
  • Catered lunch and snacks in offices
Last updated Oct 21, 2026. Interested? Apply on the company site.
Everlaw logo

About Everlaw

AI-Powered Cloud-Native Ediscovery Software for Legal Professionals

Transform your approach to litigation and investigations with the world’s most advanced ediscovery software.

ediscoverylegal
Company profileWebsite

More open roles at Everlaw