GRC Analyst
Rogo is hiring a GRC Analyst in New York, United States. It pays $150k-$200k a year and Level rates it ; you can apply on Rogo.
Level's read on this job
- On Level's scale, this role is Little AI ●○○○: aI is not part of the work.
- Tools and skills the posting cites include Soc 2, Iso 27001 and Iso 42001.
- Level classifies it as a mid-level role.
- Level lists 100 other open roles at Rogo.
AI in this role
Support customer trust, security assurance, and compliance programs including frameworks like ISO 42001 and the EU AI Act.
Why Rogo
Our mission is to transform global finance by empowering professionals at the world's top investment banks, private equity funds, and investment firms with AI that delivers unparalleled speed, accuracy, and insight. We're not just improving financial workflows; we're redefining them.
This is a unique opportunity to join a generational company driving transformation in one of the most important industries in the world. With a rapidly growing, global client base, proven product-market fit, and backing from world-class investors, we are scaling quickly and defining a new category of enterprise AI.
Our team is sharp, motivated, and deeply committed to Rogo’s mission. We take ownership of complex problems and stay relentlessly focused on our users. If you thrive in a fast-paced environment, demand excellence, and want to help build the future of finance, we invite you to join us.
The Role
Rogo is hiring a GRC Analyst to support our customer trust, security assurance, and compliance programs as we scale globally. This role plays a critical part in how Rogo communicates its security and privacy posture to customers, partners, and internal stakeholders.
You will work closely with security, engineering, legal, and go-to-market teams to ensure Rogo’s controls, risk posture, and security practices are clearly understood and accurately represented. This is a hands-on role requiring strong written communication, technical curiosity, and continuous improvement across frameworks relevant to the UK, EU, US, and beyond.
What You Will Own
Support Rogo’s customer trust and security assurance processes, including responding to customer security inquiries and risk assessments.
Serve as a key point of contact for customer security reviews, partnering with internal teams to provide accurate, consistent, and timely responses.
Maintain and improve Rogo’s security documentation and response materials, ensuring alignment with current systems and controls.
Collaborate with security and engineering teams to understand and articulate technical controls in a customer-facing context.
Support compliance initiatives across frameworks such as SOC 2, ISO 27001, ISO 42001, EU AI Act, UK Cyber Essentials, and GDPR, including evidence collection and audit readiness.
Identify common themes and gaps surfaced through customer inquiries and contribute to continuous improvement of security and compliance practices.
Help streamline and scale trust-related workflows as customer volume and enterprise requirements grow.
What You Will Need
Experience supporting customer-facing security, compliance, or trust functions at a SaaS or cloud-native company.
Experience translating technical security concepts into clear, concise written responses.
An understanding of common enterprise security expectations across areas such as cloud infrastructure, access control, data protection, and incident response.
Strong attention to detail and the ability to manage multiple parallel requests without sacrificing quality.
Clear communication skills with both technical and non-technical stakeholders.
Sound judgment when handling sensitive or ambiguous security questions.
Interest in operating at the intersection of security, compliance, and customer engagement.
Bonus:
Experience working with security questionnaires, audits, or third-party risk assessments.
Exposure to cloud security concepts (AWS/GCP, Kubernetes, IAM).
Experience improving or scaling trust, GRC, or compliance processes in growing organizations.
Prior experience supporting enterprise customers.
Comfort engaging with financial services customers on security, risk, and compliance topics.
Who You Are
You thrive in fast-paced environments. You are high-intensity and care a lot about what you do, and you're ecstatic to work at a startup.
You are ambitious. You have fun solving problems that others think are impossible.
You are curious. You find joy in learning about AI, technology, and finance.
You are an owner. You are autonomous, self-directed, and comfortable working with ambiguity.
You are collaborative, organized, thoughtful, and kind.
Why Join Rogo?
Up and to the right: Rogo has strong product adoption with the world's leading financial institutions, and we are still early. The upside is enormous.
Extraordinary team: we take talent density seriously. You'll do the best work of your career alongside some of the sharpest people in AI and finance.
A one-of-one problem: bringing AI to the core of how Wall Street works is one of the most ambitious, technically demanding, and consequential problems today. There is nowhere else you can work on it at this scale.
Real ownership: You'll own real surface area and watch the world's most sophisticated users rely on your work.
Always at the frontier: we work at the edge of what the best models can do and turn it into products people trust. If you're obsessed with AI, this is where it's happening.
How we rate this
GRC Analyst at Rogo rates 30 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- Tell me about a project where compliance was part of your work. What did you do?
- Tell me about a project where risk management was part of your work. What did you do?
- Tell me about a project where security assurance was part of your work. What did you do?
- Tell me about a project where grc was part of your work. What did you do?
- Tell me about a project where regulatory frameworks was part of your work. What did you do?
Adapt your resume
- List these exact terms on your resume: Compliance, Risk Management, Security Assurance, Grc, and Regulatory Frameworks. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new AI jobs by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Other roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step