Junior GRC / Compliance Analyst

Junior GRC/ Compliance Analyst

We are looking for a Junior GRC/ Compliance Analyst to step onto a fintech unicorn rocketship! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference.

You will support Tipalti’s third-party risk management program, helping to assess, monitor, and manage risks associated with vendors and external service providers. You’ll work closely with the GRC Manager to mature and operationalize the TPRM function.

Why join Tipalti?

Tipalti is the AI-powered platform for finance automation, elevating how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their financeoperations efficiency. Our platform provides a comprehensive suite of finance automation solutions designed for mid-market businesses across accounts payable, global payouts, procurement, employee expenses, corporate cards, supplier management, tax compliance, and treasury. Tipalti partners with leading financial institutions such as Citi, Wells Fargo, J.P. Morgan, and Visa, enabling over 5,000 global companies to efficiently and securely pay millions of suppliers and payees across 200+ countries and territories, in 120 currencies.

At Tipalti, we pride ourselves on our collaborative culture, the quality of our product and the capabilities of our people. Tipaltians are passionate about the work they do, and keen to get the job done. Tipalti offers competitive benefits, a flexible workplace, career coaching, and an environment where diverse individuals can thrive and make an impact. Our culture ensures everyone checks their egos at the door and stands ready to reach for success together. 

Founded in Israel in 2010, Tipalti is a global business headquartered in the San Francisco Bay Area (Foster City) with offices in Tel Aviv, Plano, Toronto, Vancouver, London, Amsterdam, Tbilisi and Medellin.

In this role, you will be responsible for:

• Conduct vendor onboarding risk assessments (security questionnaires, due diligence reviews)
• Maintain and update the vendor risk register and assessment pipeline
• Review vendor SOC 2 reports, security documentation, and certifications
• Track vendor risk findings and follow up on remediation commitments
• Support periodic vendor reassessments based on risk tier
• Coordinate with internal stakeholders (Procurement, Legal, IT) on vendor reviews
• Assist in building and improving TPRM workflows and documentation
• Manage assessments within the GRC platform (Drata)

About you 

• Basic understanding of information security concepts (CIA triad, access control, data classification)
• Familiarity with compliance frameworks (ISO 27001, SOC 2)
• Strong organizational and communication skills
• Ability to read and interpret vendor security documentation
• Attention to detail and structured thinking

Advantages:

• Experience with GRC tools (Drata, Vendict, or similar)
• Basic knowledge of data privacy regulations (GDPR, CCPA)
• Any security certification progress (CompTIA Security+, ISO 27001 Foundation)

What You’ll Learn

• End-to-end TPRM lifecycle in a high-growth fintech environment
• Hands-on experience with ISO 27001 and SOC 2 operational controls
• GRC tooling (Drata) and vendor risk workflows

Tipalti is posting this job opening for and on behalf of SDS (Cyprus) Limited and/or SDS Tbilisi Limited, LLC (both are hereinafter referred to as “SDS”). Any potential employment and/or consulting arrangements entered into, as it relates to this job opening, will be between you and SDS. Tipalti shall not be held responsible for the information and contents contained in this job posting, or for any issues arising out of or related to this job posting.