Vibes Verified

Governance, Risk, and Compliance (GRC) Analyst

ChicagoHybridFull Time$75,000–$80,000 /yrPosted 9 days ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

GRC
governance
risk
compliance
audits
control evidence
control testing
findings
vendor risk
customer security questionnaires

Nice to have

Smartsheet
compliance platform

Role summary

Vibes is seeking a Governance, Risk, and Compliance (GRC) Analyst to join their small, fast-moving team. This role focuses on collecting and organizing control evidence, coordinating internal and external audits, testing controls, and managing findings. You will also handle customer security questionnaires, RFP responses, and policy administration. The ideal candidate has 2 years of experience in audit, compliance, or GRC, with knowledge of control frameworks and experience with customer questionnaires. Bonus points for control testing experience and familiarity with Smartsheet or compliance platforms. This hybrid role offers a base salary of $75,000 - $80,000 annually.

About Vibes

Vibes’ mobile-first platform creates personal, revenue-driving and long-term mobile engagement between consumers and the world-class brands they love. Industry leaders like Chipotle, Kohl’s and Polo Ralph Lauren use Vibes to grow customer relationships with relevant, high-volume mobile messaging and mobile wallet marketing on a global scale. Vibes enables marketers to seamlessly connect with their customers using a data-rich and API-packed solution that beautifully optimizes and unifies their SMS, MMS, RCS and Mobile Wallet campaigns. To learn more about Vibes, visit www.vibes.com.

Security isn't just a checkbox at Vibes. It's part of what customers buy. Every questionnaire you answer and every audit you pass helps us win and keep business. As our GRC Analyst, you'll collect the evidence, test the controls, and give auditors and customers real confidence in how we protect their data.

You'll join a small, fast-moving GRC and vendor management team, working closely with the vendor operations side, which gathers evidence on applications and vendors for you to validate. Many of our processes are still being built, so you'll shape how compliance works here instead of just administering it. This role will report to the Senior Program Manager.

What you'll own:

Evidence and audits

Collect and organize control evidence continuously, so audit season is a non-event

Help coordinate internal and external audits and serve as the day-to-day contact for auditors

Prepare regular control and audit status reports for leadership

Control testing and findings

Test whether controls work as designed, and work with control owners to close gaps

Maintain the finding registry and verify closure before anything is marked complete

Run quarterly user access reviews, sample offboarding, and reconcile the app and laptop inventories against SSO, billing, and purchases

Vendor risk

Review vendor risk assessments and recommend approval or follow-up before any contract is signed or renewed

Customer trust

Draft responses to customer security questionnaires and the compliance sections of RFPs, flagging answers that need review

Use and help improve our AI tool that pre-fills questionnaire responses, and keep the process behind it current

Policy

Administer the policy lifecycle: review dates, version control, and attestation tracking

What success looks like:

Audits that run smoothly because evidence is already organized and current

Findings that get closed, and stay closed, because you verified them

Questionnaires and RFP responses that go out accurate, on time, and faster each quarter

Control owners who see you as a helpful partner, not an auditor to dodge

You might be a fit if you:

Have 2 years in audit, compliance, or governance, risk, and compliance (or equivalent)

Have working knowledge of a recognized control framework and how evidence maps to it

Have handled customer security questionnaires and/or RFP security sections end to end

Have built or maintained a questionnaire answer library

Are comfortable using AI tools to draft compliance answers, with review steps

Bonus points for: control testing experience (picking samples, judging whether evidence proves the control, writing up gaps), basic Smartsheet, or compliance platform experience.

How we work:

Detail-obsessed. You catch the wrong date, the missing signature, and the evidence that doesn't match the control.

Fearless about evidence. You're comfortable asking control owners anywhere in the business for proof, and you can tell when what you got doesn't answer the question.

Objective and kind. You support the business while staying honest about whether a control passes. You raise concerns clearly and kindly, and escalate when needed.

You spot problems early and arrive with a recommended solution, not just a flag.

Self-directed and adaptable. You keep many threads moving, learn fast, and stay steady when priorities shift.

Honest and reliable. You do what you say you'll do and treat people well, including customers.

Our Core Values:

Respect, honesty, and integrity for all stakeholders

Always be learning

Relentless focus on the customer

Never be satisfied

Create value

Seek accountability and ownership

Compensation and Benefits

The base salary for this role is $75,000 - $80,000 annually. Final compensation for this role will be determined by various factors such as a candidate's relevant work experience, skills and certifications. Vibes offers employees a full slate of benefits including competitive salaries, options, medical, dental and vision coverage, short and long term disability, life insurance, 11 paid holidays, flexible vacation, commuter benefits, a 401(k) plan and match, and a paid parental leave program.

Equal Opportunity Employer

Vibes is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. Reasonable accommodations will be made to meet the requirements of the Americans with Disabilities Act and will be provided as requested by candidates taking part in all aspects of the selection process.

Ready to apply?

You'll be redirected to Vibes's application page.