Franklin Fitch
GRC Analyst
New York, New York, US
Role snapshot
Franklin Fitch is hiring a GRC Analyst on a full-time basis. This is a role based in New York, New York, US.
- Company
- Franklin Fitch
- Location
- New York, New York, US
- Job type
- Full-time
- Posted
- Nov 2, 2026
Who this role suits
The listing does not state a required experience level here. Read the requirements in the description below and apply if they match your background.
How to prepare your application
- Match your résumé to the requirements in the description, using the same wording where it is honest to do so.
- Prepare a short example for each requirement you meet, and be ready to explain any you only partly meet.
- Read what Franklin Fitch publishes about its product or team, so you can say clearly why this role and this company.
Apply only on Franklin Fitch's own site. A genuine employer never asks candidates for money, deposits or bank details to apply, interview or “secure” a job. If something looks wrong, use Report a problem with this listing and we will review it. Read how we check listings.
About the role
GRC Analyst — AI Fintech Scale-Up | Manhattan, New York
An AI company building analyst tooling for the world's largest investment banks, private equity funds and hedge funds is hiring a GRC Analyst to support its customer trust, security assurance and compliance programmes as it scales globally.
This is a hands-on role at a company with strong product-market fit and serious backing, at the point where enterprise customer demands are outgrowing the processes built to handle them.
What you'll own
- Customer trust and security assurance, including responding to security inquiries and risk assessments
- Acting as a key point of contact for customer security reviews, partnering internally to give accurate, consistent and timely responses
- Maintaining and improving security documentation and response materials so they stay aligned to current systems and controls
- Working with security and engineering to understand technical controls and articulate them in a customer-facing context
- Supporting compliance across SOC 2, ISO 27001, ISO 42001, the EU AI Act, UK Cyber Essentials and GDPR, including evidence collection and audit readiness
- Spotting recurring themes and gaps in customer inquiries and feeding them back into security and compliance practice
- Streamlining trust workflows as customer volume and enterprise requirements grow
What you'll need
- Experience supporting customer-facing security, compliance or trust functions at a SaaS or cloud-native company
- The ability to translate technical security concepts into clear, concise written responses
- An understanding of enterprise security expectations across cloud infrastructure, access control, data protection and incident response
- Strong attention to detail, and the ability to run multiple parallel requests without dropping quality
- Sound judgment on sensitive or ambiguous security questions
Nice to have
- Security questionnaires, audits or third-party risk assessments
- Cloud security concepts (AWS/GCP, Kubernetes, IAM)
- Experience scaling trust, GRC or compliance processes in a growing organisation
- Supporting enterprise customers, particularly in financial services
The environment
Fast-paced and high-intensity, with a small, dense team. You'd need to be comfortable with ambiguity and self-directed enough to own outcomes rather than wait for direction.
Based in Manhattan.
If this sounds like you, get in touch.
+1 212 970 7603