
GRC Analyst - Security
Primer is hiring a mid-level GRC Analyst to own Governance, Risk & Compliance operations: maintain year-round evidence and continuous control monitoring, handle inbound security questionnaires and vendor assessments, coordinate risk assessments and vulnerability management, maintain policy lifecycle and drive certification efforts (e.g., ISO 27001). The role requires 3+ years in GRC/compliance and familiarity with SOC 2, PCI DSS, ISO 27001 and EU frameworks such as DORA, NIS2, and the EU AI Act.











