Skip to content

GRC

Security Compliance Analyst

Deploy logoDeploy$110,000–$140,000/yrSan FranciscoFull-timePosted 3w ago

At its midpoint, $125k/yr, this role pays less than the $175k/yr midpoint for Governance, Risk & Compliance (GRC) openings today (usual band $153k–$322k/yr).

The full posting

About Deploy

Deploy is an intelligence infrastructure platform that gives developers and enterprises access to open source and proprietary AI models. For leading open source LLMs, Deploy operates an optimized model inference engine that keeps costs and latency low while maintaining high throughput. Deploy also offers a set of proprietary AI models that address challenges in content safety, AI & deepfake detection, sponsorship intelligence, and IP & publicity protection. Trusted by the world's largest and most innovative organizations, Deploy's solutions unlock high-performance AI model inference at production scale.

Deploy has raised more than $200M from leading investors, including Tomales Bay Capital, General Catalyst, 8VC, Glynn Capital, Bain & Company, Visa Ventures, and others. The company has more than 250 employees across offices in San Francisco, Seattle, New York, and Delhi.

**Security Compliance Analyst **

We are looking for a highly motivated individual with information security governance and compliance experience to be part of our team! As a Security Compliance Analyst at Deploy, you will collaborate with engineers and auditors to meet security compliance controls as well as enhance security compliance capabilities. You will be responsible for addressing auditors’ requests and performing on call operations. Our ideal candidate should be able to assist in running the risk management program that is managed by the Information Security team.

Responsibilities

  • Manage Deploy's current risk management program
  • Manage external and internal audits, including reviewing materials that require attention for accuracy and properly adhering to regulatory expectations.
  • Implement ISMS in coordination with executive and mid-level management
  • Participate in building a comprehensive Governance, Risk and Compliance program
  • Work with Engineering and Product teams to identify process improvements and efficiencies in areas change management, access management and general technology process controls.
  • Provide compliance, risk, and controls expertise to support information security and compliance initiatives.
  • Protect the business by assisting with cyber security risk assessments.
  • Maintain awareness of industry best practices for data maintenance handling as it relates to your role
  • Manage security and privacy training programs
  • Adhere to and champion policies, guidelines and procedures pertaining to the protection of information assets
  • Manage external security, privacy, and compliance requirements, including both internal requirements for vendors as well as external requirements placed on Deploy
  • Report actual or suspected security and/or policy violations/breaches to an appropriate authority
  • Define, develop, implement, and maintain our policies and processes that enable consistent, effective privacy practices that minimize risk and ensure the confidentiality of protected information, paper and/or electronic, across all media types and comply with applicable privacy laws and regulations

Requirements

  • Bachelor's degree or related experience
  • Minimum 4+ years experience related to conducting risk-based assessment for information systems and/or operations.
  • Minimum 1+ years experience running a comprehensive Governance, Risk and Compliance program
  • Minimum 2+ years experience leading industry standard (ISO 27001 or SOC 1/2) audits from either side
  • Strong knowledge of applicable privacy laws (CCPA/CPRA, GDPR)
  • Ability to communicate in a written and oral format to technical and non-technical audiences in a business-friendly manner
  • Demonstrated success in a competitive environment
  • Highly self-motivated and ambitious in achieving goals
  • Strong team player, but can work and execute independently
  • Driven; no one needs to push you to excel; that’s just who you are
  • Hungry to learn and actively look for opportunities to contribute
  • Highly organized and detail-oriented; can handle multiple projects and dynamic priorities without missing a beat

Who We Are

We are a group of ambitious individuals who are passionate about creating a revolutionary AI company. At Deploy, you will have a steep learning curve and an opportunity to contribute to one of the fastest growing AI start-ups in San Francisco. The work you do here will have a noticeable and direct impact on the development of the company.

Thank you for your interest in Deploy and we hope to meet you soon!

The current expected base salary for this position ranges from $110,000 - $140,000. Actual compensation may vary depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the total compensation package that is provided to compensate and recognize employees for their work; stock options may be offered in addition to the range provided here.

Text as Deploy published it; last compared with the original on 11 Nov 2026.

The application

Your details and CV, then 4 questions (2 written).

Have readyCVLinkedIn (optional)X profile (optional)GitHub (optional)Portfolio (optional)Website (optional)
  1. 1.
    What is/was your GPA?Short answer
  2. 2.
    Will you now or in the future require sponsorship for employment? If so, please explain in detail (e.g., OPT with STEM extension).Written answer
  3. 3.
    Please check all that apply:Pick any (8 options)
  4. 4.
    If Other, please specify:Written answer · optional

Taken from Deploy's application form as it stood on 11 Nov 2026.

The employer: Deploy

Deploy (formerly Hive) sells AI models and applications for content moderation, deepfake detection and sponsorship measurement; its security team handles compliance and engineering.

Pay and benefits: In-office roles in San Francisco and Seattle at a privately held company.

Want companies to ask for you?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Deploy posts a security role

We read Deploy's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.