← Back to jobs

Governance, Risk & Compliance Analyst

perplexity

San Francisco
IT Governance

Job Score

80 pts
On-site model (+70) IT Governance (+10)

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online.

What You'll Do

  • Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements

  • Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations

  • Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks

  • Build internal GRC platform and tooling

  • Conduct risk assessments and mitigate data security and compliance risks

  • Write, update and enact policies capturing security, privacy, and AI safety requirements

  • Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices

What You'll Bring

  • 6+ years of experience leading engagements in audit and compliance

  • Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling

  • Worked in high tech companies in cloud-native environments

  • Able to translate complex compliance requirements into clear and actionable work-streams

  • Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering

  • Self-motivated, detailed and organized, with a diligent approach to project completion

  • Excellent written, verbal, and interpersonal communication skills

What did you think of this job?

Comments 0

Want to leave a comment?
Sign in or create your account in seconds to join the discussion.
Loading comments...

About IT Governance

IT Governance is the area responsible for ensuring that information technology resources are used strategically, efficiently, and in compliance with standards and regulations. IT governance professionals ensure that technology supports business objectives in a secure and reliable manner.

Key skills include IT service management (ITIL), IT audit and compliance, risk management, business continuity, disaster recovery, metrics and indicators (SLAs, KPIs), and strategic alignment between IT and business. Frameworks like COBIT, ITIL, ISO 27001, and compliance standards are essential.

IT Governance professionals in technology companies are highly valued, especially those who master ITSM, IT audit, and risk management. The field offers opportunities from governance analyst to CIO/CTO, with a focus on efficiency, compliance, security, and business value.

Discover Other Areas

Understand the scope of work, key skills, and tools used in different career areas.

About Software Development

Software Development is one of the most dynamic and constantly evolving fields in the job market. Professionals in this area are responsible for creating, maintaining, and optimizing web, mobile, and desktop applications that impact millions of users daily.

Key languages and frameworks include JavaScript (React, Node.js, Vue.js), Python (Django, Flask), Java (Spring), PHP (Laravel), and TypeScript. Demand for full-stack developers continues to grow, especially in tech companies and startups.

Salaries range from entry-level to senior positions, with growing opportunities for remote work and international freelancing.

About Branding

Branding is the area responsible for building, managing, and strengthening a brand's identity and market value. Branding professionals create strategies that define how the brand is perceived by the public, from the logo to the complete customer experience.

Key skills include brand strategy, visual identity, brand guidelines, positioning, naming, brand voice, market research, brand equity, and brand management. Knowledge of graphic design (Figma, Illustrator, Photoshop), storytelling, and brand experience is a differentiator.

Branding professionals in technology companies are highly valued, especially those who master employer branding, digital branding, and can build strong, memorable brands in competitive markets. The field offers opportunities from brand designer to head of brand, with a focus on identity, differentiation, and perceived value.

About Information Security

The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.

Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.

Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.

About Cloud Solutions

The Cloud Solutions area is responsible for designing, implementing, and managing cloud infrastructure and services (AWS, Azure, GCP) for companies. Cloud professionals architect scalable, secure, and cost-optimized solutions, from data center migrations to serverless and multi-cloud architectures.

Key skills include IaC (Terraform, CloudFormation), containers (Docker, Kubernetes), serverless (Lambda, Cloud Functions), managed databases (RDS, DynamoDB, BigQuery), cloud networking (VPC, CDN, load balancer), and security (IAM, WAF, KMS). Knowledge of FinOps, cloud governance, and AWS/Azure/GCP certifications is a differentiator.

Cloud Solutions professionals in technology companies are highly valued, especially those who master multi-cloud architectures, FinOps, and can optimize costs while maintaining performance and security. The field offers opportunities from cloud engineer to cloud solutions architect, head of cloud, and chief cloud architect.

About Agile

The Agile and Digital Transformation area is fundamental for organizations seeking efficiency and rapid adaptation. Agile professionals facilitate processes, eliminate bottlenecks, and promote a culture of continuous improvement.

Key certifications include CSM, PSM, SAFe, ICP, and Kanban. Knowledge of Scrum, Kanban, XP, and agile frameworks is essential, as are leadership and facilitation soft skills.

Senior Agile coaches and Scrum Masters are highly valued, especially in technology companies that adopt agile methodologies at scale.

Career Guides

Technology Career Guide

Planning, skills, interviews, and professional growth in IT, Data Science, DevOps, and Product.

Read full guide →

Design Career Guide

UX/UI, Graphic Design, Product Design. Portfolio, tools, interviews, and growth in the Design field.

Read full guide →

Marketing Career Guide

SEO, Paid Media, Growth, Content Marketing. Certifications, tools, and strategies to grow in Digital Marketing.

Read full guide →

Finance Career Guide

Financial market, investments, corporate finance, certifications, and strategies to grow in the financial field.

Read full guide →

Communication Career Guide

Journalism, PR, Corporate Communication, Content Marketing, and Multimedia Production.

Read full guide →

Administration Career Guide

Business Management, HR, Logistics, Consulting, Project Management, and Entrepreneurship.

Read full guide →

Data Career Guide

Data Science, Data Engineering, BI, Machine Learning, and AI. From training to the job market.

Read full guide →

Product Career Guide

Product Management, Product Ownership, Agile, Scrum, and OKRs. From strategy to execution.

Read full guide →

Tech & Remote Glossary

Stop getting lost in interviews and job descriptions

The job market, especially within tech and global companies, has developed its own dialect. Not understanding these acronyms can make you lose valuable opportunities or poorly negotiate your contract. To end this problem, we created the Definitive Glossary for the Remote Professional.

🏢 Work Models & Routine

Async (Asynchronous Work)
A communication model where responses don't need to be immediate. Instead of back-to-back meetings, the team relies on well-structured documents, threads, and messages. It's the gold standard for global companies spanning multiple time zones.
Sync (Synchronous Work)
The opposite of Async. It requires the team to be online and available at the same time for meetings, live chats, and real-time collaboration.
Daily / Stand-up
A quick daily meeting (usually 15 minutes) common in Agile (Scrum) methodologies. The team answers three questions: What did I do yesterday? What will I do today? Are there any blockers?
All-Hands / Town Hall
A company-wide meeting involving all employees. Usually led by the founders (C-Levels) to present results, new goals, and answer team questions.
1:1 (One-on-One)
A recurring individual meeting between a professional and their direct manager. It is used for career alignment, feedback, and problem-solving, not just for project status updates.

💰 Contracts, Benefits & Compensation

PTO (Paid Time Off)
Instead of strict, categorized leave policies, modern US companies usually offer a flexible pool of days (e.g., 20 days of PTO, or even "Unlimited PTO") that you can use for vacations, sick days, or personal matters, while receiving your regular compensation.
Equity / Stock Options
Company ownership. The startup offers you the right to buy shares at a heavily discounted strike price in the future. If the company grows, goes public, or is acquired, these shares can be highly lucrative.
Vesting (Vesting Schedule)
The rule that controls your Equity. It usually lasts 4 years. You don't get all the shares on day one; you "earn" them gradually as you stay with the company. A "1-year Cliff" means you must stay for at least one year to receive your first batch of shares.
RSUs (Restricted Stock Units)
Unlike Stock Options (where you have the right to buy the stock), RSUs are actual shares the company grants you as a bonus or part of your compensation package, following a strict Vesting schedule.
Independent Contractor (1099 / B2B)
The most common international hiring model for global talent working for US companies. You act as a service provider (business-to-business), receiving the gross salary (often six-figure compensation) without standard local payroll tax deductions at the source.

🤖 Recruitment & Hiring Process

ATS (Applicant Tracking System)
The "robot" that reads your resume. Software like Greenhouse, Ashby, and Workday are used to filter candidates by keywords before a human even looks at the document. (Pro tip: this is why your resume must be clean, semantic, and have the right keywords).
JD (Job Description)
The document that lists the responsibilities, technical requirements, and benefits of the open position.
Cultural Fit
The interview stage that evaluates if your core values, communication style, and worldview align with the company's culture. This is the ultimate test of your Soft Skills.
Onboarding
The integration process. It's the period of your first few weeks at the company, where you get your access credentials, learn about the culture, study the internal documentation, and understand how the product works.

🚀 How to use this to your advantage?

The secret isn't just knowing what these acronyms mean, but using them actively. If during an interview for a premium tech role you ask, "How does your PTO policy and Vesting schedule work?", the recruiter will immediately perceive you as a high-level professional, familiar with the global market standards.

The remote job market requires preparation. And having the right vocabulary is the first big step to securing six-figure proposals and standing out among thousands of applicants.

Expert Tip

The New Paradigm of Digital Marketing and Social Media

The New Paradigm of Digital Marketing and Social Media: Impact, Opportunities, and the Future of the Market

By Mondywork Team | 6-minute read

The Evolution: From "Just Posting" to True Revenue Engines

There was a time when digital marketing was viewed as a secondary department, heavily focused on vanity metrics like likes and follower counts. That era is officially over. In today's global market, Digital Marketing and Social Media Management are the beating heart of customer acquisition, acting as literal Revenue Engines.

Top-tier US startups, unicorns, and global B2B/B2C enterprises have realized that consumer attention is the most expensive asset on the internet. It's no longer just about creativity; it's about merging authentic communication with ruthless data analysis and Artificial Intelligence integrations.

How Does This Market Impact Global Companies?

The impact of modern marketing on the corporate world is absolute. According to the HubSpot State of Marketing report, companies that closely align their digital strategies with sales see a 20% higher revenue growth.

  • CAC Reduction and LTV Focus: Companies rely on marketing professionals to lower Customer Acquisition Cost (CAC) through organic traffic and social media, while simultaneously increasing Lifetime Value (LTV) through retention strategies.
  • Community-Led Growth: Brands don't just want consumers anymore; they want raving fans. Social media has evolved into a community-building channel, where engagement breeds brand advocates who buy repeatedly.
  • Global and Borderless Presence: Digital marketing has shattered geographical borders. A startup in Silicon Valley can easily scale its sales in Europe using campaigns managed by a strategist based in Brazil, Portugal, or anywhere else, working 100% remote.

The 2026 Landscape: What Do Companies Expect?

The digital marketing job market has never been more technical and demanding. The era of the "jack-of-all-trades" generalist is making way for hyper-focused experts and strategists with a systemic vision—the highly sought-after "T-Shaped" professionals.

"Marketing has transitioned from an art based purely on intuition to a science driven by data, predictability, and hyper-segmentation."
— eMarketer Digital Trends

The barrier to entry has risen significantly due to the integration of Artificial Intelligence. Tools that generate copy or images in seconds (like ChatGPT and Midjourney) haven't replaced the professional; they've raised the bar. The market now seeks talent who can "pilot" these AIs to craft strategies, automate workflows using tools like n8n or Zapier, and analyze Business Intelligence (BI) dashboards in Looker Studio.

Golden Opportunities: The Hottest Roles

Highly qualified professionals are being fiercely fought over, especially on platforms like Mondywork, where international companies seek remote talent offering six-figure compensation and global remote flexibility. The areas with the highest demand include:

  1. Growth Marketer / Hacker: The professional focused on rapid experimentation across the marketing funnel (Pirate Metrics - AARRR). They blend marketing, data analysis, and a bit of product engineering to find scalable growth levers.
  2. Performance Manager (Paid Media): The traditional traffic manager has evolved. Today, this professional manages multi-million dollar budgets across Google Ads, Meta Ads, and LinkedIn Ads (essential for B2B), with an absolute focus on ROAS (Return on Ad Spend).
  3. Social Media Strategist & Community Manager: Going far beyond scheduling posts, this talent understands internet culture, dominates short-form formats (TikTok, Reels, Shorts), and knows how to convert a social audience into qualified leads within the company's sales funnel.
  4. SEO & Content Architect: With shifting search algorithms and the impact of AI (Search Generative Experience), the SEO professional who masters search intent, information architecture, and Core Web Vitals is indispensable for long-term organic acquisition.
  5. Marketing Operations (Marketing Ops): The architect behind the curtain. They manage CRMs (Salesforce, HubSpot), email automations, and ensure the entire marketing data infrastructure is flawless.

Is It Worth Entering or Transitioning into This Field?

Absolutely. If you are an analytical, curious professional who understands human behavior and isn't afraid of data spreadsheets, digital marketing offers one of the most promising and flexible career paths in the modern world.

To stand out in rigorous international recruitment systems (ATS like Greenhouse and Ashby), it is crucial that your resume and portfolio showcase real results. Forget generic descriptions; US tech recruiters and Heads of Marketing want to read hard metrics: "Increased organic traffic by 150% in 6 months" or "Managed $500k in ad spend while maintaining CAC 20% below target".

The global market is vast, decentralized, and pays incredibly well for those who know how to turn clicks and views into predictable revenue.