GRC Analyst
MetropolisAI-powered Payments company
Los Angeles, United States$100,000.00 - $135,000.00Mid
Slow Ventures
SoftBank Vision Fund 2
LionTree
BDT & MSD Partners
DFJ
Eldridge Industries
Legal & Compliance
About the role
TL;DR
Analyze and mature information security policies, drive employee security awareness, and pioneer AI governance.
- •Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our expanding Security team.
- •You will mature information security policies, drive employee security awareness, and pioneer our AI governance framework.
- •Key Responsibilities Author, update, and enforce corporate security policies to guarantee cross-departmental compliance Deploy and manage required information security training campaigns as the platform owner Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams Conduct structured risk assessments on emerging tools and internal AI models to maintain behavioral guardrails Report training metrics, policy exceptions, and risk postures directly to senior management Requirements 3+ years of experience in information security GRC, cybersecurity training, or technology compliance Proven track record of managing required security awareness programs and driving cross-functional accountability Working knowledge of standard industry frameworks, specifically SOC 2 and PCI-DSS Communication skills with the ability to explain complex regulatory needs to non-technical employees Bachelor’s degree in Cybersecurity, Information Systems, or an equivalent technical discipline
Required skills
SOC 2
Domain expertise
cybersecurity
Benefits & perks
healthcare benefits, 401(k) plan, short-term and long-term disability coverage, basic life insurance, stock option plan, bonus plans
Tech stack
SOC 2
