Senior Analyst, GRC

ABOUT VEG In 2014, VEG was born with a mission to help people and their pets when they need it most by challenging norms and fixing the ER experience. Since then, we’ve expanded rapidly, with hospitals nationwide open 24/7/365, and created an ER experience that focuses on what our pets and pet parents really need. We’ve done the same for our people (VEGgies), finding a way to say YES so they are empowered to achieve great things, grow in unexpected ways, and find a place where they truly belong. We’re rethinking emergency care from every angle—from how we run our hospitals to how we support the people working inside them. That’s where our headquarters team comes in. Whether building technology to make our hospitals more efficient, recruiting and growing incredible VEGgies, or bringing our brand to life through marketing, our VQ (VEG Headquarters) team makes it all possible—ensuring our hospitals and people have everything they need to help pets and their families. VEG is a 2025 and 2026 certified Great Place to Work®. THE JOB At VEG, we find a way to say YES—so our teams can move fast without cutting corners on trust. As a Senior Analyst on our Governance, Risk & Compliance team, you’ll be the hands-on force that keeps VEG compliant and audit-ready as we grow. You’ll assess the vendors and AI tools we bring in, keep our PCI and privacy evidence airtight, and turn our security standards into everyday practice—all with modern, AI-assisted tooling and a team that owns its outcomes. You’ll grow where you want to go, from strong execution into program ownership and beyond. If you sweat the details, close the loop without being asked, and want your work to protect people and their pets, we want you on our team. WHAT YOU’LL DO Conduct third-party and AI tool risk assessments through our intake and triage process, and track remediation to closure. Collect and maintain evidence for PCI DSS and privacy compliance, keeping us continuously audit-ready. Document security controls, monitor their health, and support internal and external audits. Update policies, standards, and baselines, and track exceptions. Maintain the risk register and support quarterly risk reporting. Partner with control owners across IT, Engineering, and Legal to keep compliance moving. WHAT YOU NEED 3+ years in GRC, IT audit, compliance, or a related security function (or equivalent experience). Working knowledge of at least one security or compliance framework (e.g., PCI DSS, NIST, SOC 2, or ISO 27001). Hands-on experience with a GRC or governance platform (e.g., Hyperproof, Archer, or OneTrust), or the ability to pick one up quickly. Strong documentation skills and a sharp eye for detail. Clear written communication and the ability to follow through without reminders. WHO YOU ARE Empathetic, instinctively taking a people-centric approach, whether supporting your colleagues or making an effort to understand different perspectives Have a sense of humility; acknowledging mistakes, sharing credit with others, and lifting up your team’s’ accomplishments Feel a strong sense of ownership over your work, taking responsibility for outcomes and staying committed to achieving long-term, impactful results Curious by nature; you ask insightful questions and continuously seek out opportunities to learn and grow your skills and knowledge HOW WE INVEST IN YOU Competitive Compensation Including $140,000 - $180,000 + bonus + benefits. Comprehensive health and wellness benefits that start on day one, and access to free therapy or counseling Paid parental leave, up to 12 weeks at 100% of regular salary, and offering inclusive fertility and family-building care for all types of families Unlimited PTO to use for vacation or sick days—however you need it! Generous employee referral program, so our awesome people can bring in more awesome people. And the little (big) things, like casual office attire, ability to bring your fur baby to work, cool VEG swag, food in the fridge for when you’…