About the company
Squarespace is a design-driven platform helping entrepreneurs build brands and businesses online. Our GRC team maintains audit readiness and supports compliance frameworks that protect Squarespace and the millions of customers who depend on us.
Responsibilities
- Lead and support audits across SOX, SOC, PCI, and NIST — from scoping through reporting — while maintaining audit-ready documentation and tracking findings to closure
- Evaluate control design and operating effectiveness, manage security risk assessments and exception records, and escalate overdue or material risks
- Conduct vendor security and privacy reviews, assess third-party control maturity, and track remediation through reassessment and closure
- Respond to customer security questionnaires and partner assessments by coordinating timely, accurate responses across teams
- Support data privacy audits and assessments covering GDPR, CCPA/CPRA, data retention, deletion, access rights, and third-party processing
- Improve GRC operations through automation, integrations, AI-enabled workflows, and continuous compliance monitoring
Requirements
- 3+ years of experience in GRC, IT audit, security compliance, or privacy compliance
- Proven experience leading or supporting complex compliance programs across frameworks such as SOX, SOC 1/2, PCI, NIST, or ISO
- Experience evaluating IT controls and translating requirements into clear, actionable expectations
- Experience supporting vendor risk programs, including security due diligence and review of independent assurance reports
- Working knowledge of SaaS and cloud environments
- Experience using GRC or workflow platforms
Conditions
- Hybrid role working from NYC office 3 days per week
- Cash Compensation Range: $108,000 - $125,000 USD
- Benefits: medical plans, fertility and adoption benefits, supplemental insurance, Headspace subscription, retirement benefits, flexible paid time off, 12 weeks paid parental leave, pretax commuter benefit, education reimbursement, employee donation match, ERGs, dog-friendly workplace, free lunch and snacks, private rooftop, hack week twice per year