GRC Senior Analyst

GRC Senior Analyst ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money. In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays. ABOUT THE ROLE: Millions of people use Notion — and this number is increasing every day. Our users depend on us to deliver a secure, consistent and trustworthy experience, and we value this more than anything. We want to keep building on that trust, while also continuing to amaze our users with the tools they can build in Notion. This is where you come in — partnering with teams across the organization to envision, plan and build Notion's Information Security posture through governance, risk and compliance. WHAT YOU'LL ACHIEVE: - Coordinate evidence collection, manage timelines with internal partners, support external auditors for compliance frameworks such as SOX ITGCs, SOC 2 Type II, ISO, HIPAA, and BSI C5. - Help improve and maintain information security policies, controls, procedures, and standards, for processes, applications, and infrastructure. - Use and help build custom AI agents and automation to scale and mature our Security GRC programs. For example, automate evidence collection, control monitoring workflows, and reporting. - Contribute to the development of dashboards and metrics for compliance and audit reporting. - Implement and expand our continuous control monitoring efforts using our compliance automation tool. - Identify gaps in our security controls and work with teams across the organization to strengthen them. SKILLS YOU'LL NEED TO BRING: - Bachelor’s or master’s degree in Computer Science, Information Technology, Management Information Systems, or Cybersecurity, or equivalent practical experience. - Strong understanding of the governance, risk, and compliance domain and why it matters for organizational security and privacy. - Familiarity with compliance automation tools (e.g., Anecdotes, Vanta). - Familiarity with cloud technologies (e.g., AWS, Wiz) and their relationship to risk and compliance. - Ability to communicate complex ideas clearly to stakeholders. - A collaborative mindset—you enjoy working cross-functionally to accomplish shared goals and care about learning, growing, and helping others do the same. - You don’t need to be an AI expert, but you’re curious and willing to adopt AI tools to work smarter and deliver better results. NICE TO HAVES: - Experience (typically 4-5+ years) in the GRC, risk, compliance, or audit domain. - Working knowledge of Notion and how AI agents can be used to enhance GRC programs. We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, o ... (truncated, view full listing at source)