GRC Analyst

Mission

Kickstart your career in Governance, Risk, and Compliance with our team at Aily Labs. As a GRC Analyst, you will be essential in supporting the day-to-day operations of our GRC programs. This is a unique opportunity to learn about compliance in an AI-native company, assisting with everything from evidence collection and vendor reviews to understanding how cutting-edge regulations are applied. If you have a curious mindset and a passion for learning, this role is your entry point into the world of GRC.

Your profile

As a GRC Analyst, you will be a key contributor to our compliance function, learning from senior team members and supporting the daily execution of GRC activities. This is a hands-on learning role where you will build a strong foundation in a supportive environment.

• Support the Day-to-Day of our Compliance Programs: You will assist in managing the daily activities for frameworks like ISO 27001, ISO 27017, ISO 27701, and SOC 2. This includes helping to gather evidence, track control statuses in our GRC platform (Drata), and keep our documentation organized.
• Contribute to Our Control Frameworks: You will help document and maintain our internal controls, learning how they align with global standards like GDPR, CCPA, AI regulations, and ISO 42001.
• Assist with Vendor Assessments: You will support the vendor review process by helping to track assessments, collect documentation from third parties, and record findings under the guidance of senior analysts.
• Support the Audit Process: You will assist during internal and external audits by helping to gather and organize evidence, coordinate responses, and learn firsthand how the audit process works.

• 1-3 years of experience in an IT, legal, or compliance-related role, OR a degree in a relevant field (e.g., Law, IT, Business, Cybersecurity) with a strong interest in GRC.
• A proactive and curious mindset with a genuine desire to learn and grow in the GRC field.
• Excellent organizational skills and a keen eye for detail.
• Good communication and collaboration skills to work effectively within our team and with other departments.
• Familiarity with or a strong interest in learning about standards like ISO 27001, privacy regulations (GDPR), and the emerging field of AI governance.

• Any relevant internship experience or personal projects related to compliance, security, or data privacy.
• Familiarity with a GRC platform like Drata is a big plus.
• Basic understanding of cloud environments (e.g., AWS).
• Certifications like CompTIA Security+ or a demonstrated interest in pursuing GRC-related certifications.

Who are we?

We are Aily Labs, a fast-growing AI startup delivering cutting-edge AI products. Since 2020, we’ve grown to over 300 professionals across Munich, Barcelona, Madrid, Cluj, and New York. Our diverse team fosters innovation, excellence, and compliance to build products that meet the highest security and privacy standards.

What sets us apart?

• Grow Your Career at the Forefront of AI Governance: This is a rare opportunity to learn about GRC from the ground up inside a cutting-edge AI company.
• Receive Direct Mentorship: You will be supported by senior team members who are invested in your professional development and success.
• A Culture of Learning: Join a team that values curiosity and provides dedicated training resources to help you build your skills and career.
• Tangible Contribution: Even in a junior role, your work will directly contribute to building and maintaining trust in our products.
• Enjoy a flexible, feedback-driven environment with opportunities for hybrid or remote work.