GRC Analyst

About the role

Rogo is seeking a GRC Analyst to support customer trust, security assurance, and compliance programs as the company scales globally. You will act as the primary liaison for security inquiries, translating technical controls into clear, customer‑facing communication.

Key responsibilities

• Respond to customer security inquiries, risk assessments, and security reviews, ensuring accurate and timely information.
• Maintain and improve security documentation, aligning it with current systems and controls.
• Collaborate with security, engineering, legal, and go‑to‑market teams to articulate technical controls for customers.
• Support compliance initiatives across frameworks such as SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit readiness.
• Identify recurring themes in customer inquiries and contribute to continuous improvement of security and compliance practices.

Required profile

• Experience in a customer‑facing security, compliance, or trust function at a SaaS or cloud‑native company.
• Strong written communication skills, able to translate technical security concepts for both technical and non‑technical stakeholders.
• Attention to detail and ability to manage multiple parallel requests without sacrificing quality.
• Interest in operating at the intersection of security, compliance, and customer engagement.

Required skills

• Knowledge of cloud security concepts (AWS, GCP, Kubernetes, IAM).
• Familiarity with security questionnaires, audits, and third‑party risk assessments.
• Understanding of enterprise security expectations such as access control, data protection, and incident response.