1

Compliance Risk Jobs in California (NOW HIRING)

Maintain an enterprise compliance and risk management program aligned with regulatory obligations and the company's risk appetite. * Provide regular compliance reporting and updates to senior ...

The AVP, Risk Management develops and updates programs to ensure compliance with applicable laws and regulations, develops training content on issues regarding risk management, and provides subject ...

Maintain an enterprise compliance and risk management program aligned with regulatory obligations and the company's risk appetite. * Provide regular compliance reporting and updates to senior ...

AVP, Risk Management

Vacaville, CA · On-site

$172K - $212K/yr

The AVP, Risk Management develops and updates programs to ensure compliance with applicable laws and regulations, develops training content on issues regarding risk management, and provides subject ...

AVP, Risk Management

Vacaville, CA · On-site

$172K - $212K/yr

The AVP, Risk Management develops and updates programs to ensure compliance with applicable laws and regulations, develops training content on issues regarding risk management, and provides subject ...

This role plays a key part in protecting customer data, reducing risk, and ensuring marketing ... Compliance Audits • Function as the department's compliance lead, assisting in coordinating ...

This role plays a key part in protecting customer data, reducing risk, and ensuring marketing ... Compliance Audits • Function as the department's compliance lead, assisting in coordinating ...

Compliance Programs Manager

Orange, CA · On-site

$120K - $135K/yr

The role leads compliance risk assessment and gap analysis activities, partners with departments to implement mitigation plans, and tracks corrective actions to verified closure. The position manages ...

The AVP, Risk Management develops and updates programs to ensure compliance with applicable laws and regulations, develops training content on issues regarding risk management, and provides subject ...

next page

Showing results 1-20

Compliance Risk information

What are some common challenges faced by professionals in Compliance Risk roles, and how can they be addressed?

Professionals in Compliance Risk often face the challenge of keeping up with constantly evolving regulations and ensuring that internal practices remain aligned with legal requirements. Balancing the need for rigorous controls while supporting business operations can also be demanding, as compliance measures must not hinder productivity. To address these challenges, ongoing education, collaboration with legal and business units, and leveraging technology for monitoring and reporting are essential strategies. Building strong communication channels across teams helps ensure compliance is integrated seamlessly throughout the organization.

What are the key skills and qualifications needed to thrive as a Compliance Risk professional, and why are they important?

To thrive as a Compliance Risk professional, you need a strong understanding of regulatory frameworks, risk assessment, and compliance procedures, usually supported by a degree in law, finance, or a related field. Familiarity with compliance management systems, GRC (Governance, Risk, and Compliance) software, and industry certifications such as CRCM or CAMS is often expected. Attention to detail, analytical thinking, and effective communication are crucial soft skills for identifying risks and ensuring organizational adherence to regulations. These skills are essential for minimizing legal exposure, maintaining ethical standards, and safeguarding the organization's reputation.

What is compliance risk?

Compliance risk refers to the potential for legal or regulatory sanctions, financial loss, or reputational damage that an organization can face if it fails to comply with laws, regulations, or internal policies. Businesses must identify, assess, and manage compliance risks to operate within the boundaries set by governing bodies. Effective compliance risk management helps organizations avoid penalties and ensures that they maintain trust with customers and stakeholders.

What is the difference between Compliance Risk vs Compliance Analyst?

AspectCompliance RiskCompliance Analyst
Primary FocusIdentifying and managing potential compliance risks within an organizationMonitoring, reviewing, and ensuring adherence to compliance policies and regulations
Required CredentialsRisk management certifications, compliance trainingCertifications like CCEP, CAMS, or similar compliance certifications
Work EnvironmentRisk management teams, compliance departments, consulting firmsCorporate compliance departments, financial institutions, healthcare organizations
Industry UsageUsed across industries to assess and mitigate compliance risksCommonly employed in industries with strict regulatory requirements

While Compliance Risk focuses on identifying and mitigating potential compliance issues proactively, Compliance Analysts primarily monitor and ensure ongoing adherence to regulations. Both roles are essential in maintaining organizational compliance but differ in scope and responsibilities.

What cities in California are hiring for Compliance Risk jobs? Cities in California with the most Compliance Risk job openings:
Governance, Risk & Compliance (GRC) Analyst

Governance, Risk & Compliance (GRC) Analyst

Ivo

San Francisco, CA • On-site

$135K - $165K/yr

Full-time

Medical, Dental, Vision, PTO

Posted 23 days ago


Job description

About Ivo?
Ivo is an AI-powered contract review and legal technology company transforming how organizations review, negotiate, and manage contracts. Security, privacy, and trust are foundational to our platform and customer relationships. As we continue to scale, we are looking for a highly motivated Governance, Risk & Compliance (GRC) Analyst to support and mature Ivo's security compliance and risk management programs.
Why Ivo?
Every civilization runs on the same infrastructure: agreements between people who don't fully trust each other. Sumerians pressed them into clay. Romans carved them into stone. We bury them in 80-page PDFs.
The way those agreements are reviewed hasn't changed in four thousand years - a human reads the whole thing and tries not to miss anything. We're building the AI that finally changes that. Ivo is the contract intelligence platform of choice for companies like Uber, Meta, Canva, IBM, and Shopify. We recently raised our Series B and have grown 800% over the last 12 months.
Role Overview:
Ivo is seeking a detail-oriented and proactive GRC Analyst to support the company's compliance, risk management, and security assurance initiatives. This role will play a key part in maintaining and enhancing Ivo's compliance programs, including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001.
The ideal candidate has experience supporting security audits, managing evidence collection, conducting risk assessments, maintaining policies and procedures, and partnering cross-functionally with engineering, IT, legal, HR, and business stakeholders.
This is a fully onsite role based out of Ivo's San Francisco headquarters to support close cross-functional collaboration with Security, Engineering, IT, and Operations teams.
Responsibilities:
  • Support and coordinate Ivo's compliance programs including SOC 2 Type II, ISO 27001, CSA STAR, and ISO/IEC 42001.
  • Assist with annual audits, surveillance audits, and customer security assessments.
  • Coordinate evidence collection and maintain audit readiness across teams.
  • Support and maintain Ivo's Vanta GRC platform and associated compliance workflows.
  • Monitor automated compliance evidence collection and control monitoring within Vanta.
  • Perform vendor and third-party risk assessments.
  • Support enterprise risk management and risk register maintenance.
  • Maintain and update security policies, standards, and procedures.
  • Support AI governance and responsible AI compliance initiatives.

Required Qualifications:
  • 3-5 years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, or related field.
  • Hands-on experience supporting SOC 2 Type II, ISO 27001, CSA STAR, and in-depth knowledge of ISO/IEC 42001.
  • Experience administering or working extensively with Vanta or similar GRC/compliance automation platforms.
  • Experience managing and maintaining a customer-facing Trust Center, including security documentation, compliance artifacts, sub-processor disclosures, and customer assurance materials.
  • Strong understanding of information security principles and common security controls.
  • Experience with audits, evidence management, and customer security reviews.
  • Excellent written and verbal communication skills.

Preferred Qualifications:
  • Experience working at a SaaS or AI company.
  • Familiarity with GDPR, CCPA, privacy regulations, and third-party risk management.
  • Knowledge of cloud environments such as GCP, AWS, or Azure.
  • Relevant certifications such as Security+, CISA, CRISC, CCSK, or ISO 27001 Lead Implementer/Auditor.
What We're Looking For:
  • Strong attention to detail and accountability.
  • Collaborative mindset with strong cross-functional communication skills.
  • Ability to translate compliance requirements into practical operational processes.
  • Interest in emerging AI governance and security frameworks.
  • Self-starter mentality with a continuous improvement mindset
Compensation and Benefits:
  • Competitive salary ($135k - $165k) and equity package.
  • Comprehensive health, dental, and vision coverage.
  • Flexible PTO.
  • Collaborative onsite work environment (5 days) at Ivo's San Francisco headquarters.
  • Opportunity to help shape the security and compliance foundation of a rapidly growing AI company.
Equal Opportunity Employer
Ivo is an equal opportunity employer and values diversity at all levels of the organization. We celebrate diversity and are committed to creating an inclusive environment for all employees.