Senior GRC Analyst, Gusto
$183-205k
Plus equity (RSUs)
2-3 days a week in office
Automated payroll, benefits & HR platform
Be an early applicant
Automated payroll, benefits & HR platform
1001+ employees
Be an early applicant
$183-205k
Plus equity (RSUs)
2-3 days a week in office
1001+ employees
Company mission
To grow the small business economy.
Role
Who you are
- 8+ years of experience in governance, risk, and compliance within SaaS, ideally in the HCM, payroll, or fintech sectors
- Bachelor’s degree in Business, Information Systems, or a related field
- Strong understanding of SaaS business models, with experience implementing controls and policies in fast-paced, product-driven environments
- Proven experience leading or supporting a SOC 2 Type 2 compliance initiative, including collaboration with auditors and cross-functional teams
- Familiarity with compliance tools and platforms such as Optro, Vanta, Drata, Viso Trust, or similar
- Demonstrated ability to translate complex GRC requirements into actionable, scalable processes
- Excellent written and verbal communication skills, including the ability to educate and influence cross-functional stakeholders
- A data-informed mindset, with the ability to use analytics to assess GRC performance and maturity
- One or more relevant professional certifications:
- CISA, CRISC, or GRCP preferred
- CGEIT, CRMA, or PMI-RMP are a bonus
What the job involves
- Gusto is seeking a Security, Governance, Risk & Compliance professional to join our team managing our security governance, risk and compliance initiatives
- This person will guide the company from foundational Governance, Risk & Compliance (GRC) maturity through to steady-state operations, leveraging AI to automate and improve old practices and tools, ensuring ongoing compliance with SOC 2 Type 2, IT General Controls, ICOC and related frameworks, while embedding security-minded practices throughout Gusto. This is a cross-functional role with key touchpoints in every department
- Develop, maintain, and ensure adherence to security and compliance SOPs, internal documentation, and company-wide policies—particularly supporting SOC 2 and future framework adoption
- Own and manage trust management platforms including documentation of controls, risks, vendors, and exceptions, and lead the implementation of AI agents to automate and improve the implementation of our controls framework and evidence collection to support it
- Collaborate with Legal, Enterprise Applications, and Gusto counterparts to establish and maintain data governance policies (e.g., classification, retention, handling)
- Conduct ongoing internal risk assessments to identify exposure and control gaps; coordinate remediation plans with functional teams
- Manage the third-party vendor risk program, including onboarding reviews, monitoring, and renewal assessments
- Lead interactions with external auditors and regulatory bodies during compliance assessments (e.g., SOC 2 Type 2) and oversee responses to client security assessments and due diligence requests
- Stay current on relevant compliance frameworks, laws, and regulations to ensure appropriate coverage and adaptability
- Partner cross-functionally (e.g., Security, Legal, Engineering, Sales, IT) to implement scalable GRC processes, harmonize systems, and foster GRC understanding through employee enablement programs and KPI-driven insights
Our take
For many small businesses, vital administrative tasks such as payroll, taxes, and benefits are manual tasks that take time and energy - which many SMB owners don’t have. The co-founders of Gusto all come from small business backgrounds, which is why they created a platform that would handle employee payments, benefits administration, and compliance support specifically for small businesses.
The company may have started slowly, as the founders focused on nailing each individual aspect of Gusto’s operations, but has now skyrocketed to unicorn status with more than 400,000 customers and a multi-billion dollar valuation. And in 2021, Gusto began acquiring other companies to strengthen its offering and position in a competitive market, including the likes of Ardius, Symmetry and Guideline.
Through its continued acquisitions and fundraising efforts, the company has carved out a strong position for itself in the space. It continues to expand its platform, for example by partnering with Parafin to launch a payroll line of credit for small businesses, and more recently launching Cofounder, an AI teammate tailored to the needs of small businesses.
Steph
Company Specialist at Welcome to the Jungle
Insights
45% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
May 2022
$55m
SERIES E
Aug 2021
$175m
SERIES E
Total funding: $706.3m
Company benefits
- Medical, dental, and vision insurance for employees and dependents
- Family care and support, including family planning and fertility benefits
- Gender-affirming care and support
- A variety of mental health resources
- Paid vacation, sick time, bereavement, and holidays, paid leaves, sabbatical, and more
- Free meals and refreshments at the office (conversation and community is an added bonus!)
Company HQ
Central Waterfront, San Francisco, CA
Leadership
Joshua Reeves
(CEO & Co-Founder)Studied Electrical Engineering at Stanford and went onto co-found Gusto in 2011.
Tomer London
(CPO & Co-Founder)Has a PhD in Electrical Engineering from Stanford. Was a Researcher at Intel, and then interned at Bump Technologies. Co-founded Vizmo before co-founding Gusto in 2011.
Edward Kim
(Head of Technology & Co-Founder)Studied Electrical Engineering at Stanford. Was Senior Project Engineer at Volkswagen of America Electronics Research Lab and then co-founded Picwing before co-founding Gusto in 2011.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 68 more jobs at Gusto