Governance, Risk, Compliance & Trust Analyst

About the role

Everlaw is looking for a Governance, Risk, Compliance & Trust Analyst to drive trust, compliance and risk workstreams that help the company scale responsibly and earn the confidence of customers and regulators. The role sits at the intersection of customer trust, compliance operations, audit readiness and vendor risk, translating the company's security posture into clear, audit-ready, customer-facing deliverables. It is a full-time, exempt position in the Oakland, CA office with a hybrid schedule (in the office M/W/Th, home on T/F).

Key responsibilities

• Drive audit readiness across FedRAMP, SOC 2 and ISO 27001/27017/27018 by organizing evidence, keeping documentation quality high and partnering with control owners to close gaps.
• Own end-to-end customer trust workflows and security questionnaires, researching technical answers and turning evidence into clear, customer-ready responses.
• Conduct third-party security and vendor risk evaluations, assessing documentation, controls and architecture against Everlaw standards with Procurement, Legal and Security Engineering.
• Maintain and improve security training programs, keeping them current and aligned with policies and frameworks such as FedRAMP and CJIS.
• Support governance workflows and public sector initiatives, including security impact analyses, change-related compliance reviews and the Public Sector Clearance Program.

Required profile

• 5+ years of experience as an individual contributor within a GRC team.
• Strong working knowledge of customer trust operations, risk management and the control evidence needed for audits such as SOC 2, FedRAMP or ISO 27001.
• Experience leading customer security questionnaire workflows and working in GRC tools, trust portals or evidence repositories.
• Track record of using metrics, dashboards or workflow data to maintain SLAs and streamline compliance.
• Able to research technical topics independently and write clear deliverables for technical and non-technical audiences.
• Authorized to work in the United States; Everlaw does not sponsor U.S. employment visas for this role.

What we offer

• Expected salary of $140,000-$178,000, plus eligibility for equity.
• Medical, dental and vision coverage, flexible spending accounts, mental health membership, paid parental leave, and life and disability insurance.
• 401(k) with up to 4% company match, 17 paid vacation days, 11 federal holidays, paid sick leave and four extra paid days off per year.
• Learning budget, monthly home internet reimbursement, desk setup stipend, catered lunches and hybrid work.