Auditing
69 days ago

Governance, Risk, Compliance & Trust Analyst

Everlaw · Oakland, California, United States
Pay
$140k–178k
Setting
Hybrid
Back to jobs Governance, Risk, Compliance & Trust Analyst Oakland, California, United States Apply The Role You'll independently drive trust, compliance, and risk workstreams that help Everlaw scale responsibly and earn long-term confidence from customers and regulators. Sitting at the intersection of customer trust, compliance operations, audit readiness, and vendor risk, you'll translate Everlaw’s security posture into clear, audit-ready, and customer-facing deliverables while streamlining how compliance work gets done. This is a full-time, exempt position based in our Oakland, CA office with a hybrid work schedule: in office M/W/Th with the option to work from home on Tu/Fr. What you'll do Drive audit readiness across core compliance frameworks (FedRAMP, SOC 2, ISO 27001/27017/27018) by organizing evidence, maintaining documentation quality, and partnering with control owners to resolve gaps. Own end-to-end customer trust workflows and security questionnaires, researching technical answers and synthesizing evidence into clear, customer-ready responses. Conduct third-party security and vendor risk evaluations, assessing documentation, controls, and architecture against Everlaw standards in partnership with Procurement, Legal, and Security Engineering. Maintain and improve security training programs, ensuring content stays current, audit-ready, and aligned with policies and regulatory frameworks like FedRAMP and CJIS. Support governance workflows and public sector initiatives, including security impact analyses, change-related compliance reviews, and the ongoing operation of the Public Sector Clearance Program. About You You have 5+ years of experience working as an individual contributor within a Governance, Risk, Compliance, and Trust (GRCT) team. You have strong working knowledge of customer trust operations, risk management, and the control evidence required to support audits such as SOC 2, FedRAMP, or ISO 27001. You've led customer security questionnaire workflows and operated within GRC tools, trust portals, or evidence repositories. You bring a track record of using operational metrics, dashboards, or workflow data to maintain SLAs and streamline compliance processes. You can independently research technical topics, navigate ambiguity, and produce concise, clear written deliverables for both technical and non-technical stakeholders. You are authorized to work in the United States. Please note that at this time, Everlaw is not sponsoring U.S. employment visas for this role. Think you're missing some of the skills and are hesitant to apply? We do not believe in the 'perfect' candidate and encourage you to apply if you feel you can bring value to our team. We often revisit candidates who may have applied for a different role if something comes up that's a better fit. The Team — IT & Security The IT & Security team builds and protects the systems a high-trust company runs on. Across corporate technology, security operations, risk, compliance, trust, facilities, and strategic programs, the team creates dependable foundations that keep Everlaw secure, productive, and ready to scale. This work protects Everlaw's people, customers, and business while making it possible for teams to move quickly without compromising the standards the industry demands. Total Rewards & Benefits The expected salary range for this role is $140,000–$178,000. Final salary depends on factors including the candidate's experience and skills, and the base pay range is subject to change. This role is also eligible for equity and the benefits below. Health & well-being Comprehensive medical, dental, and vision coverage Flexible Spending Accounts for health and dependent care expenses Membership to Modern Health to support mental health and wellness Paid parental leave Company-sponsored life and disability insurance Financial rewards Competitive equity grants, so you share in Everlaw's long-term growth 401(k) plan with company matching of up to 4% of eligible annual compensation Growth & everyday perks 17 paid vacation days, 11 federal holidays, and paid sick leave Four "Everlawlidays" (additional paid company-wide days off) per year Annual allocation for learning & development and relevant professional membership dues Hybrid work with regular work-from-home days and flexibility for life's logistics Monthly home internet reimbursement, plus a stipend for your desk setup Catered lunch each workday, plus snacks and company-wide events in our offices About Everlaw When a lawsuit or investigation happens, teams must comb through vast amounts of electronic evidence — emails, documents, chats, files — to find what matters. That work is not a side task but the case itself, and where most of the time and money in litigation goes. Everlaw is the litigation and investigation management platform changing that, using AI to turn mountains of messy data into the handful of facts that win or lose a case, compressing weeks of work into hours. We're the kind of place that's ranked #1 on G2 in our category and named a Great Place to Work™ by our own team. So if you want a front row seat to an industry in transformation, career-defining work you'll be proud to tell people about, and real upside at a company in control of its own destiny, we'd love to get to know you. #LI-MN2 #LI-Hybrid   ​​About Everlaw At Everlaw, you'll shape how AI re-wires the legal industry, at a category-leading business built on a mission to illuminate the truth. Everlaw is an equal opportunity employer. We pride ourselves on having a diverse workforce and we do not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. We respect the gender, gender identity and gender expression of our applicants and employees, and we honor requests for pronouns. It is our policy to comply with all applicable national, state and local laws pertaining to nondiscrimination and equal opportunity, including the California Equal Pay Act.  Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   We collect and process the personal information you provided along with your job application in accordance with our Applicants Privacy Notice and Notice at Collection.   When preparing to engage with Everlaw as a candidate, you may use AI tools for research, polishing application materials, and interview prep. However, any assessments (unless explicitly stated), remote interviews or live interviews must be completed independently without AI support. By submitting your application, you agree to adhere to these rules. Here's the link to our full policy, and please reach out with any questions!   We use Gem as part of our hiring and/or promotional processes. As part of the evaluation process, we provide Gem with job requirements and candidate-submitted applications. Certain features of the platform may qualify it as an Automated Employment Decision Tool (AEDT) under applicable regulations. For positions in New York City, our use of Gem complies with NYC Local Law 144. We began using Gem in April 2026.   Apply for this job * indicates a required field Autofill my application First Name* Last Name* Email* Phone Country* Phone* Resume/CV* Attach Attach Dropbox Google Drive Enter manually Enter manually Accepted file types: pdf, doc, docx, txt, rtf Cover Letter Attach Attach Dropbox Google Drive Enter manually Enter manually Accepted file types: pdf, doc, docx, txt, rtf LinkedIn Profile Website Please confirm the city AND state you currently reside in:* Is there a nickname, preferred name, or chosen name we should call you by? Are you authorized to work in the United States without restrictions?* Select... Will you now or in the future require any type of sponsorship for employment visa status (e.g. H1-B status)?)* Select... Would you be willing and able to adhere to Everlaw's coordinated hybrid work schedule of three days per week (M/W/Th) in our Oakland HQ? (With reasonable exceptions and flexibility)* Select... Have you previously worked in the e-discovery or legal tech/services industry?* Select... Are you subject to a non-compete agreement, non-disclosure agreement, confidentiality agreement, or other similar restrictive covenant agreement that could prohibit your being able to perform the duties associated with the position you are applying for?* Select... I understand, affirm, and agree that I am strictly prohibited from taking, using, or disclosing any information, electronic or otherwise, that any current or former employer treats or characterizes as trade secret, confidential, or proprietary. This prohibition applies to all stages of my relationship with Everlaw, including the application process, the interview process, and if hired, throughout my employment. I further understand and agree that I am strictly prohibited from placing or storing any such information on any of Everlaw’s systems or devices, including but not limited to computers, cell phones, or cloud storage.* Select... By agreeing to the affirmations above, I acknowledge my continuing legal obligations to my current and former employers. If I am subject to any prior written agreements that may restrict my ability to perform the duties of the position for which I am applying, I will detail those restrictions in the “Additional Information” section below and provide copies of such agreements to Everlaw.* Select... Additional Information ​​How did you hear about Everlaw?* Select... ​​If you selected Other, Career Fair, or Agency, please specify here Voluntary Self-Identification For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. As set forth in Everlaw’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. Gender Select... Are you Hispanic/Latino? Select... Race & Ethnicity Definitions If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows: A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status Select... Voluntary Self-Identification of Disability Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 07/31/2029 Why are you being asked to complete this form? We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years. Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp. How do you know if you have a disability? A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to: Alcohol or other substance use disorder (not currently using drugs illegally) Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS Blind or low vision Cancer (past or present) Cardiovascular or heart disease Celiac disease Cerebral palsy Deaf or serious difficulty hearing Diabetes Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders Epilepsy or other seizure disorder Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome Intellectual or developmental disability Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD Missing limbs or partially missing limbs Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS) Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities Partial or complete paralysis (any cause) Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema Short stature (dwarfism) Traumatic brain injury Disability Status Select... PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete. Submit application Powered by
Listed by Everlaw for a position based in the United States. Employers on this board attest they are hiring domestically.