Senior GRC Analyst

Introduction to Demandbase

Demandbase is the Smarter GTM™ company for B2B brands. We help marketing and sales teams overcome the disruptive data and technology fragmentation that inhibits insight and forces them to spam their prospects. We do this by injecting Account Intelligence into every step of the buyer journey, wherever our clients interact with customers, and by helping them orchestrate every action across systems and channels - through advertising, account-based experience, and sales motions. The result You spot opportunities earlier, engage with them more intelligently, and close deals faster.

As a company, we're as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have offices in the San Francisco Bay Area, New York, Seattle, and teams in the UK and India, and allow employees to work remotely. We have also been continuously recognized as one of the best places to work in the San Francisco Bay Area.

We're committed to attracting, developing, retaining, and promoting a diverse workforce. By ensuring that every Demandbase employee is able to bring a diversity of talents to work, we're increasingly capable of living out our mission to transform how B2B goes to market. We encourage people from historically underrepresented backgrounds and all walks of life to apply.

About The Role

As a Senior GRC Analyst, you will play a pivotal role in advancing Demandbase's global Governance, Risk, and Compliance (GRC) program. Reporting to the Senior Director of GRC, you will partner across teams to strengthen our compliance framework, manage audits, perform risk assessments, and drive continuous improvement in our security and privacy posture.

You will help ensure ongoing alignment with global standards such as ISO 27001 , ISO 27701 , ISO 42001 , and SOC 2 , while contributing to the maturity of our enterprise risk and compliance operations. This is an opportunity to make a significant impact on a growing, global security program and advance your expertise in governance, risk, compliance, and AI assurance.

What You'll Be Doing

Governance, Risk & Compliance Execution

• Perform walkthroughs, control testing, and evidence collection across IT systems, applications, and infrastructure to support internal and external security audits.
• Conduct and assist in risk assessments, identifying and tracking remediation efforts to resolution.
• Support audits and assessments by coordinating with internal stakeholders and external auditors, ensuring timely and complete corrective actions.
• Maintain documentation and dashboards within GRC tools (e.g., MetricStream, Hyperproof, Vanta) to monitor compliance posture and progress.

Frameworks & Program Development

Culture, Communication & Continuous Improvement

Qualifications

Our Commitment to Diversity, Equity, and Inclusion at Demandbase

At Demandbase, we believe in creating a workplace culture that values and celebrates diversity in all its forms. We recognize that everyone brings unique experiences, perspectives, and identities to the table, and we are committed to building a community where everyone feels valued, respected, and supported. Discrimination of any kind is not tolerated, and we strive to ensure that every individual has an equal opportunity to succeed and grow, regardless of their gender identity, sexual orientation, disability, race, ethnicity, background, marital status, genetic information, education level, veteran status, national origin, or any other protected status. We do not automatically disqualify applicants with criminal records and will consider each applicant on a case-by-case basis.

We recognize that not all candidates will have every skill or qualification listed in this job description. If you feel you have the level of experience to be successful in the role, we encourage you to apply!

Personal information that you submit will be used by Demandbase for recruiting and other business purposes. Our Privacy Policy explains how we collect and use personal information.

Personal information that you submit will be used by Demandbase for recruiting and other business purposes. Our Privacy Policy explains how we collect and use personal information.

Skills Required

ERM, Internal Controls, Disaster Recovery, Information Security, Vendor Management, Iso 27001, Grc, Business Continuity