GRC Analyst

New York City

Squarespace is looking for a GRC Analyst to operate and continuously improve our governance, risk, and compliance programs within the Security organization. Our GRC team maintains audit readiness and supports the compliance frameworks — SOX, SOC 2, PCI DSS, NIST, and more — that protect Squarespace and the millions of customers who depend on us. We are a collaborative, detail-oriented team that moves deliberately and takes ownership of outcomes. You will work closely with Engineering, Legal, Finance, Product, and external auditors. This is an opportunity to modernize how GRC works — building automation, continuous monitoring, and data-driven reporting into programs that directly support revenue and customer trust.

This is a hybrid role working from our NYC office 3 days per week. You will report to the GRC Manager.

You'll Get To...

  • Lead and support audits across SOX, SOC, PCI, and NIST — from scoping through reporting — while maintaining audit-ready documentation and tracking findings to closure.
  • Evaluate control design and operating effectiveness, manage security risk assessments and exception records, and escalate overdue or material risks to the right partners.
  • Conduct vendor security and privacy reviews, assess third-party control maturity, and track remediation through reassessment and closure.
  • Respond to customer security questionnaires and partner assessments by coordinating timely, accurate responses across teams.
  • Support data privacy audits and assessments covering GDPR, CCPA/CPRA, data retention, deletion, access rights, and third-party processing.
  • Improve GRC operations through automation, integrations, AI-enabled workflows, and continuous compliance monitoring that reduce manual effort and strengthen audit readiness.

Who We're Looking For

  • 3+ years of experience in GRC, IT audit, security compliance, or privacy compliance, with demonstrated ability to manage audit activities end to end.
  • Proven experience leading or supporting complex compliance programs across frameworks such as SOX, SOC 1/2, PCI, NIST, or ISO — including scoping, control testing, issue management, and reporting.
  • Experience evaluating IT controls and translating requirements into clear, actionable expectations for both technical and non-technical teams.
  • Experience supporting vendor risk programs, including security due diligence and review of independent assurance reports.
  • Working knowledge of SaaS and cloud environments.
  • Experience using GRC or workflow platforms to maintain accurate records and drive repeatable processes.

Nice to Haves

  • Experience building or improving GRC automation, continuous control monitoring, or compliance dashboards.
  • Familiarity with privacy engineering concepts and privacy-by-design practices.

Benefits & Perks

  • A choice between medical plans with an option for 100% covered premiums 
  • Fertility and adoption benefits
  • Access to supplemental insurance plans for additional coverage
  • Headspace mindfulness app subscription
  • Global Employee Assistance Program
  • Retirement benefits with employer match
  • Flexible paid time off
  • 12 weeks paid parental leave and family care leave
  • Pretax commuter benefit
  • Education reimbursement
  • Employee donation match to community organizations
  • 7 Global Employee Resource Groups (ERGs)
  • Dog-friendly workplace
  • Free lunch and snacks
  • Private rooftop
  • Hack week twice per year

Cash Compensation Range: $108,000 - 125,000 USD

The base salary for this position will vary based on job-related criteria including relevant skills, experience, and location, among other factors.

In addition to the cash compensation above (which includes base salary and, where applicable for eligible roles, may include overtime pay), Squarespace employees are eligible to be granted an option to purchase our common stock. Sales positions generally offer a competitive On Target Earnings (OTE) incentive structure in addition to base salary.

About Squarespace

Squarespace is a design-driven platform helping entrepreneurs build brands and businesses online. We empower millions of customers in more than 200 countries and territories with all the tools they need to create an online presence, build an audience, monetize, and scale their business. Our suite of products range from websites, domains, ecommerce, and marketing tools, as well as tools for scheduling with Acuity and creating and managing social media presence with Bio Sites and Unfold. Our team of more than 1,700 is headquartered in New York City, with offices in Dublin, Ireland, and Aveiro, Portugal. For more information about our company, visit https://www.squarespace.com/about/careers.

Our Commitment 

Today, more than a million people around the globe use Squarespace to share different perspectives and experiences with the world. Not only do we embrace and celebrate the diversity of our customers, but we also work toward the same in our employees. At Squarespace, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or other class protected by applicable law. We are proud to be an equal opportunity workplace.

#LI-Hybrid

Thank you in advance for providing the following details about your work history from your resume! This helps us ensure that your candidate information is accurate and consistent during the hiring process.

 

Squarespace will never solicit your personal banking information or ask you to transfer money in connection with a job offer or interview. We also will not reach out to you via phone or SMS without your permission or knowledge.

 

If you plan to use AI in any capacity during your candidate journey, please review our Candidate AI Policy.

Create a Job Alert

Interested in building your career at Squarespace? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...

 

For purposes of this question ‘sponsorship to legally work for SQSP’ means the current or future need for any nonimmigrant visa petition or application, including for an H-1B, O-1, E-3, TN, etc., as well as any I-140 portability or Adjustment of Status portability for long-delayed adjustment of status applications that have been pending for 180 days or longer. Please ask us if you are uncertain whether you may need immigration sponsorship or desire clarification.

Failure to disclose accurate information about your sponsorship requirements on your application may prohibit Squarespace from being able to sponsor you and result in the termination of your candidacy. 

Have you previously been employed by or worked directly for Squarespace in any capacity? Please choose all that apply. Answering YES means you have worked at Squarespace before. This does not include owning a site. *
Select...
Select...
Select...
Select...
Select...

 

When you apply to a job with a Squarespace group company, information you submit will be processed by Squarespace in accordance with our Candidate Privacy Statement.

US Voluntary Completion: Self-Identification

Squarespace is proud to be an equal opportunity workplace and is deeply committed to providing a fair and equitable experience for all candidates, employees and customers. Our Inclusion & Impact efforts focus on uplifting the experiences and perspectives of underrepresented groups and enabling everyone to do work that draws out the best in all of us. 

You are invited to voluntarily self-identify your gender and race/ethnicity below.  Your answers will not affect your opportunity for employment, or terms or conditions of employment. Any information you provide will be treated confidentially and this form, which will be used for EEO-1 reporting purposes, will be kept separate from all other personnel records, only accessible by authorized personnel (including, e.g., select members of the People Team). 

Please click here to read our full Candidate Privacy Statement.

Please click here to learn more about inclusion and impact at Squarespace. 

Race/Ethnicity definitions as provided by the EEOC

Please note that if you choose not to self-identify your race/ethnicity at this time, the federal government requires us to determine this information by visual survey and/or other available information based on the following definitions: 

  • Asian: A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam.
  • Black or African American: A person having origins in any of the black racial groups of Africa.
  • Hispanic or Latino: A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race.
  • Native American or Alaska Native: A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment.
  • Native Hawaiian or Pacific Islander: A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands.
  • White: A person having origins in any of the original peoples of Europe, the Middle East, or North Africa.
  • Two or More Races: All persons who identify with more than one of the five races listed above (White, Black or African American, Native Hawaiian or Pacific Islander, Asian, Native American or Alaska Native). For the purposes of this group, identifying as Hispanic or Latino and only one of the listed 5 race groups does NOT qualify.
Select...
Select...