Grc Analyst Jobs in California
Grc Analyst jobs in California are among the most active in the country, concentrated in technology, financial services, healthcare, and defense contracting, with openings at every level from entry-level compliance associate through senior GRC manager. The heaviest hiring is in San Francisco, Los Angeles, and San Diego, where established employers like Google, Kaiser Permanente, and Northrop Grumman maintain large compliance and risk functions. The most in-demand specialties are IT risk management, SOC 2 and ISO 27001 compliance, and third-party vendor risk. Find a role that fits below and apply directly.
Find Grc Analyst JobsOverview
Showing 5 of 5+ Grc Analyst jobs
Looking for more grc analyst jobs?
Explore related role searches to find more openings that fit.
See related jobsCrusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.
We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.
We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.
If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.
About This Role
We’re seeking a GRC Analyst to support the day-to-day execution of our Governance, Risk, and Compliance program. Reporting to the Head of GRC, this role focuses on operational compliance activities; including user access reviews, evidence collection, customer trust support, and vendor risk management.
You’ll play a key role in maintaining our continuous compliance posture by supporting audits, updating policies, responding to customer security inquiries, and helping improve processes within our GRC platform. The ideal candidate is detail-oriented, organized, and proactive, with a strong interest in improving efficiency through automation and AI tools.
What You’ll Be Working On
- Supporting User Access Reviews (UARs) across systems and applications on a recurring schedule
- Monitoring completion of security awareness training and following up with teams as needed
- Assisting in maintaining and updating organizational security policies and standards
- Supporting third-party security assessments and vendor risk management processes
- Collecting, organizing, and preparing audit evidence for SOC 2, ISO 27001, HIPAA, and other frameworks
- Partnering with internal teams to ensure evidence is accurate, current, and audit-ready
- Responding to customer security questionnaires and due diligence requests with guidance from senior team members
- Maintaining and updating audit and compliance documentation
- Supporting updates and improvements within the GRC platform, including control tracking and workflows
- Identifying opportunities to streamline and improve GRC processes
- Leveraging AI tools to streamline GRC activities, including drafting responses, summarizing evidence, and enhancing program documentation
- Tracking compliance tasks and supporting reporting on control health and program status
What You’ll Bring to the Team
- 5-7 years of experience in GRC, information security, IT audit, or a related compliance role
- Foundational knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, or NIST CSF
- Experience working with GRC platforms (Vanta preferred; Drata, AuditBoard, or similar tools also valued)
- Hands-on experience performing user access reviews, vendor risk assessments, or audit support activities
- Familiarity with customer security questionnaires and customer trust processes
- Comfort using AI tools (e.g., Gemini, Claude, Copilot) to improve efficiency in day-to-day work
Bonus Points
- Certifications such as Security+, CISA (in progress), or ISO 27001 foundations
- Exposure to cloud environments (GCP preferred; AWS/Azure helpful)
- Experience with policy management or security awareness training tools
- Interest in AI governance, risk, or emerging compliance frameworks
Benefits:
- Competitive compensation and equity packages
- Restricted Stock Units
- Paid time off, paid holidays & leave of absence programs
- Comprehensive health, dental & vision insurance
- Employer contributions to HSA account
- Paid parental leave
- Paid life insurance, short-term and long-term disability
- Professional development & tuition reimbursement
- Mental health & wellness support
- Commuter benefits (parking & transit)
- Cell phone stipend
- 401(k) Retirement plan with company match up to 4% of salary
- Volunteer time off
- Global travel insurance & emergency assistance
- Daily meals allowance
- Additional perks & programs specific to location
Compensation Range
Compensation will be paid in the range of up to $130,000 - $150,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicants knowledge, education, and abilities, as well as internal equity and alignment with market data.
Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.
Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.
We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.
We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.
If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.
About This Role
We’re seeking a GRC Analyst to support the day-to-day execution of our Governance, Risk, and Compliance program. Reporting to the Head of GRC, this role focuses on operational compliance activities; including user access reviews, evidence collection, customer trust support, and vendor risk management.
You’ll play a key role in maintaining our continuous compliance posture by supporting audits, updating policies, responding to customer security inquiries, and helping improve processes within our GRC platform. The ideal candidate is detail-oriented, organized, and proactive, with a strong interest in improving efficiency through automation and AI tools.
What You’ll Be Working On
- Supporting User Access Reviews (UARs) across systems and applications on a recurring schedule
- Monitoring completion of security awareness training and following up with teams as needed
- Assisting in maintaining and updating organizational security policies and standards
- Supporting third-party security assessments and vendor risk management processes
- Collecting, organizing, and preparing audit evidence for SOC 2, ISO 27001, HIPAA, and other frameworks
- Partnering with internal teams to ensure evidence is accurate, current, and audit-ready
- Responding to customer security questionnaires and due diligence requests with guidance from senior team members
- Maintaining and updating audit and compliance documentation
- Supporting updates and improvements within the GRC platform, including control tracking and workflows
- Identifying opportunities to streamline and improve GRC processes
- Leveraging AI tools to streamline GRC activities, including drafting responses, summarizing evidence, and enhancing program documentation
- Tracking compliance tasks and supporting reporting on control health and program status
What You’ll Bring to the Team
- 5-7 years of experience in GRC, information security, IT audit, or a related compliance role
- Foundational knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, or NIST CSF
- Experience working with GRC platforms (Vanta preferred; Drata, AuditBoard, or similar tools also valued)
- Hands-on experience performing user access reviews, vendor risk assessments, or audit support activities
- Familiarity with customer security questionnaires and customer trust processes
- Comfort using AI tools (e.g., Gemini, Claude, Copilot) to improve efficiency in day-to-day work
Bonus Points
- Certifications such as Security+, CISA (in progress), or ISO 27001 foundations
- Exposure to cloud environments (GCP preferred; AWS/Azure helpful)
- Experience with policy management or security awareness training tools
- Interest in AI governance, risk, or emerging compliance frameworks
Benefits:
- Competitive compensation and equity packages
- Restricted Stock Units
- Paid time off, paid holidays & leave of absence programs
- Comprehensive health, dental & vision insurance
- Employer contributions to HSA account
- Paid parental leave
- Paid life insurance, short-term and long-term disability
- Professional development & tuition reimbursement
- Mental health & wellness support
- Commuter benefits (parking & transit)
- Cell phone stipend
- 401(k) Retirement plan with company match up to 4% of salary
- Volunteer time off
- Global travel insurance & emergency assistance
- Daily meals allowance
- Additional perks & programs specific to location
Compensation Range
Compensation will be paid in the range of up to $130,000 - $150,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicants knowledge, education, and abilities, as well as internal equity and alignment with market data.
Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.
See All 5 Grc Analyst Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Grc Analyst JobsGrc Analyst Jobs by City in California
Where California roles are concentrated, by current openings.
Grc Analyst Job Market in California
A snapshot from current California openings, updated as new roles post.
Who's Hiring
- Adobe1
- Anthropic1
- CRUSOE1
- IXL Learning1
- Lambda1
Top Industries Hiring
- Technology & Software4
- Artificial Intelligence1
- Science & Research1
What California Employers Look For
The qualifications that appear most often in grc analyst jobs across California.
- Bachelor's degree in information security, business, or a related field
- Hands-on experience with GRC platforms such as ServiceNow, Archer, or OneTrust
- Relevant certification such as CRISC, CISA, CISSP, or CISM
- Working knowledge of frameworks including NIST CSF, ISO 27001, and SOC 2
- Experience conducting risk assessments, control testing, and audit support
- Strong written communication skills for policy documentation and executive reporting
Grc Analyst Jobs in California: Frequently Asked Questions
How do you become a grc analyst in California?
Most grc analyst roles in California require a bachelor's degree in information security, computer science, business administration, or a related discipline. California does not issue a state-specific license for this role, but employers consistently favor candidates who hold recognized certifications such as CRISC, CISA, or CISSP. Starting in an IT audit, compliance coordinator, or information security associate role at a California technology company, financial institution, or health system is the most direct entry path.
How much do grc analysts make in California?
Grc analysts in California earn a median of about $96,980 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $57,530 for the lowest 10% to over $158,280 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire grc analysts in California?
Employers hiring grc analysts in California right now include Adobe, Anthropic, and CRUSOE, based on current listings on Migrate Mate as of June 2026. California's concentration of large technology firms, regulated financial institutions, and major health systems means demand is consistent and spread across multiple industries statewide.
Which California cities have the most grc analyst jobs?
San Francisco, San Jose, and San Mateo have the most grc analyst openings in California. San Francisco leads because of its density of enterprise technology companies and fintech firms, Los Angeles draws demand from entertainment, aerospace, and financial services, and San Diego's strong defense contracting and biotech sectors drive consistent hiring for risk and compliance professionals there.
Are there remote grc analyst jobs in California?
Yes, and more than most fields. About 20% of grc analyst openings tied to California are remote or hybrid as of June 2026, reflecting the desk-based and documentation-heavy nature of the work. Policy development, risk assessments, and control monitoring are the parts of the role most commonly performed remotely, while on-site presence is more often required for audit facilitation and stakeholder meetings.
How can I get hired as a grc analyst in California with little or no experience?
The most realistic entry path is moving from an IT support, internal audit, or IT helpdesk role into a junior GRC or compliance associate position. Large California technology companies and health systems like Salesforce and Kaiser Permanente regularly hire for entry-level compliance analyst and IT audit associate roles that do not require prior GRC experience. Earning a CompTIA Security+ or completing a NIST framework course strengthens any application, and building a small portfolio of sample risk assessments or policy documents gives hiring managers a concrete reason to call.
Where can I find and apply to grc analyst jobs in California?
You can find and apply to grc analyst jobs in California on Migrate Mate, which lists current openings from employers actively hiring across the state. Find the roles that fit your experience and apply directly to each one.
See All 5 Grc Analyst Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Grc Analyst Jobs