Governance, Risk, Compliance & Trust Analyst

The Role

You'll independently drive trust, compliance, and risk workstreams that help Everlaw scale responsibly and earn long-term confidence from customers and regulators. Sitting at the intersection of customer trust, compliance operations, audit readiness, and vendor risk, you'll translate Everlaw’s security posture into clear, audit-ready, and customer-facing deliverables while streamlining how compliance work gets done.

This is a full-time, exempt position based in our Oakland, CA office with a hybrid work schedule: in office M/W/Th with the option to work from home on Tu/Fr.

What you'll do

• Drive audit readiness across core compliance frameworks (FedRAMP, SOC 2, ISO 27001/27017/27018) by organizing evidence, maintaining documentation quality, and partnering with control owners to resolve gaps.

• Own end-to-end customer trust workflows and security questionnaires, researching technical answers and synthesizing evidence into clear, customer-ready responses.

• Conduct third-party security and vendor risk evaluations, assessing documentation, controls, and architecture against Everlaw standards in partnership with Procurement, Legal, and Security Engineering.

• Maintain and improve security training programs, ensuring content stays current, audit-ready, and aligned with policies and regulatory frameworks like FedRAMP and CJIS.

• Support governance workflows and public sector initiatives, including security impact analyses, change-related compliance reviews, and the ongoing operation of the Public Sector Clearance Program.

About You

• You have 5+ years of experience working as an individual contributor within a Governance, Risk, Compliance, and Trust (GRCT) team.

• You have strong working knowledge of customer trust operations, risk management, and the control evidence required to support audits such as SOC 2, FedRAMP, or ISO 27001.

• You've led customer security questionnaire workflows and operated within GRC tools, trust portals, or evidence repositories.

• You bring a track record of using operational metrics, dashboards, or workflow data to maintain SLAs and streamline compliance processes.

• You can independently research technical topics, navigate ambiguity, and produce concise, clear written deliverables for both technical and non-technical stakeholders.

• You are authorized to work in the United States. Please note that at this time, Everlaw is not sponsoring U.S. employment visas for this role.

Think you're missing some of the skills and are hesitant to apply? We do not believe in the 'perfect' candidate and encourage you to apply if you feel you can bring value to our team. We often revisit candidates who may have applied for a different role if something comes up that's a better fit.

The Team — IT & Security

The IT & Security team builds and protects the systems a high-trust company runs on. Across corporate technology, security operations, risk, compliance, trust, facilities, and strategic programs, the team creates dependable foundations that keep Everlaw secure, productive, and ready to scale. This work protects Everlaw's people, customers, and business while making it possible for teams to move quickly without compromising the standards the industry demands.

Total Rewards & Benefits

The expected salary range for this role is $140,000–$178,000. Final salary depends on factors including the candidate's experience and skills, and the base pay range is subject to change. This role is also eligible for equity and the benefits below.

Health & well-being

• Comprehensive medical, dental, and vision coverage

• Flexible Spending Accounts for health and dependent care expenses

• Membership to Modern Health to support mental health and wellness

• Paid parental leave

• Company-sponsored life and disability insurance

Financial rewards

• Competitive equity grants, so you share in Everlaw's long-term growth

• 401(k) plan with company matching of up to 4% of eligible annual compensation

Growth & everyday perks

• 17 paid vacation days, 11 federal holidays, and paid sick leave

• Four "Everlawlidays" (additional paid company-wide days off) per year

• Annual allocation for learning & development and relevant professional membership dues

• Hybrid work with regular work-from-home days and flexibility for life's logistics

• Monthly home internet reimbursement, plus a stipend for your desk setup

• Catered lunch each workday, plus snacks and company-wide events in our offices

About Everlaw

When a lawsuit or investigation happens, teams must comb through vast amounts of electronic evidence — emails, documents, chats, files — to find what matters. That work is not a side task but the case itself, and where most of the time and money in litigation goes. Everlaw is the litigation and investigation management platform changing that, using AI to turn mountains of messy data into the handful of facts that win or lose a case, compressing weeks of work into hours.

We're the kind of place that's ranked #1 on G2 in our category and named a Great Place to Work™ by our own team. So if you want a front row seat to an industry in transformation, career-defining work you'll be proud to tell people about, and real upside at a company in control of its own destiny, we'd love to get to know you.

• #LI-MN2
• #LI-Hybrid