---
title: 'Senior GRC Analyst at Gusto, Inc.'
canonical: 'https://feeny.ai/job/senior-grc-analyst-gusto-inc-san-francisco-yv38sahenwm0'
type: 'job'
last_seen: '2026-09-14'
---

# Senior GRC Analyst at Gusto, Inc.

- **Company:** Gusto, Inc.
- **Location:** San Francisco, CA
- **Work type:** hybrid
- **Posted:** 2026-08-27
- **Last confirmed live:** 2026-09-14
- **Apply:** https://job-boards.greenhouse.io/gusto/jobs/8082139

## Job description

## About Gusto

At Gusto, we're on a mission to grow the small business economy. We handle the hard stuff — payroll, health insurance, 401(k)s, and HR — so owners can focus on their craft and their customers. With teams in Denver, San Francisco, and New York, we support more than 500,000 small businesses nationwide and are building a workplace that reflects the people we serve.

All full-time employees receive competitive base pay, benefits, and equity (RSUs) — because everyone who helps build Gusto should share in its success. Offer amounts are determined by role, level, and location. Learn more about our[Total Rewards philosophy](https://gusto.com/about/careers/total-rewards).

AI is a fundamental part of how work gets done at Gusto. We expect all team members to actively engage with AI tools relevant to their role and grow their fluency as the technology evolves. AI experience requirements vary by role and will be assessed during the interview process.

About the Role:

Gusto is seeking a Security, Governance, Risk & Compliance professional to join our team managing our security governance, risk and compliance initiatives. This person will guide the company from foundational Governance, Risk & Compliance (GRC) maturity through to steady-state operations, leveraging AI to automate and improve old practices and tools, ensuring ongoing compliance with SOC 2 Type 2, IT General Controls, ICOC and related frameworks, while embedding security-minded practices throughout Gusto.  This is a cross-functional role with key touchpoints in every department.

Here’s what you’ll do day-to-day:

- Develop, maintain, and ensure adherence to security and compliance SOPs, internal documentation, and company-wide policies—particularly supporting SOC 2 and future framework adoption.
- Own and manage trust management platforms including documentation of controls, risks, vendors, and exceptions, and lead the implementation of AI agents to automate and improve the implementation of our controls framework and evidence collection to support it
- Collaborate with Legal, Enterprise Applications, and Gusto counterparts to establish and maintain data governance policies (e.g., classification, retention, handling).
- Conduct ongoing internal risk assessments to identify exposure and control gaps; coordinate remediation plans with functional teams.
- Manage the third-party vendor risk program, including onboarding reviews, monitoring, and renewal assessments.
- Lead interactions with external auditors and regulatory bodies during compliance assessments (e.g., SOC 2 Type 2) and oversee responses to client security assessments and due diligence requests.
- Stay current on relevant compliance frameworks, laws, and regulations to ensure appropriate coverage and adaptability.
- Partner cross-functionally (e.g., Security, Legal, Engineering, Sales, IT) to implement scalable GRC processes, harmonize systems, and foster GRC understanding through employee enablement programs and KPI-driven insights.

Here’s what we're looking for:

- 8+ years of experience in governance, risk, and compliance within SaaS, ideally in the HCM, payroll, or fintech sectors.
- Bachelor’s degree in Business, Information Systems, or a related field.
- Strong understanding of SaaS business models, with experience implementing controls and policies in fast-paced, product-driven environments.
- Proven experience leading or supporting a SOC 2 Type 2 compliance initiative, including collaboration with auditors and cross-functional teams.
- Familiarity with compliance tools and platforms such as Optro, Vanta, Drata, Viso Trust, or similar.
- Demonstrated ability to translate complex GRC requirements into actionable, scalable processes.
- Excellent written and verbal communication skills, including the ability to educate and influence cross-functional stakeholders.
- A data-informed mindset, with the ability to use analytics to assess GRC performance and maturity.
- One or more relevant professional certifications:
- CISA, CRISC, or GRCP preferred
- CGEIT, CRMA, or PMI-RMP are a bonus

Our cash compensation amount for this role is targeted at $183,000-205,000 in the San Francisco Bay Area. Stock equity is additional. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts listed above.

Gusto has physical office spaces in Denver, San Francisco, and New York City. Employees who are based in those locations will be expected to work from the office on designated days approximately 2-3 days per week (or more depending on role). The same office expectations apply to all Symmetry roles, Gusto's subsidiary, whose physical office is in Scottsdale.

Note: The San Francisco office expectations encompass both the San Francisco and San Jose metro areas.

When approved to work from a location other than a Gusto office, a secure, reliable, and consistent internet connection is required. This includes non-office days for hybrid employees.

Our customers come from all walks of life and so do we. We hire great people from a wide variety of backgrounds, not just because it's the right thing to do, but because it makes our company stronger. If you share our values and our enthusiasm for small businesses, you will find a home at Gusto.

Gusto is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Gusto considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Gusto is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. We want to see our candidates perform to the best of their ability. If you require a medical or religious accommodation at any time throughout your candidate journey, please fill out [this form](https://docs.google.com/forms/d/e/1FAIpQLSdEfl7Bp-Twz7LLlhGlha46CrxZ9Kacgakmarf3K2TbnaEgKQ/viewform) and a member of our team will get in touch with you.

Gusto takes security and protection of your personal information very seriously. Please review our [Fraudulent Activity Disclaimer](https://gusto.com/about/careers/fraudulent-activity-disclaimer).

Personal information collected and processed as part of your Gusto application will be subject to [Gusto's Applicant Privacy Notice](https://gusto.com/about/careers/applicant-privacy-notice).

## About Gusto, Inc.

## Company Overview
- **One-liner**: Gusto provides an all-in-one payroll, benefits, and HR platform that automates and simplifies the people side of running a small business.
- **Entity Type**: Private (bootstrapped to significant scale; no recent funding rounds disclosed)
- **Headquarters**: Denver, Colorado, USA (with offices in San Francisco, New York City, and Scottsdale, Arizona)
- **Founded**: 2012 (originally launched as ZenPayroll)
- **Founders**: Not publicly available in provided sources

## Core Business
- **Primary industry**: Human Resources / Payroll / Benefits technology
- **Target customers**: Small and medium-sized businesses (SMBs) across the U.S. (and Canada via EOR)
- **Mission or purpose**: “We’re making work meaningful for everyone, everywhere.” – Focused on helping small businesses take care of their teams.

## Products & Services
- **Payroll Processing (Core)**: Full-service payroll that automatically calculates, files, and pays taxes. Supports both W-2 employees and international contractors.
- **Benefits Administration**: Health insurance, 401(k) plans, commuter benefits, and other voluntary benefits integrated into the platform.
- **HR & Compliance Tools**: Hiring, onboarding, time tracking, PTO management, and compliance support (e.g., labor law posters, ACA reporting).
- **Employer-of-Record (EOR) for Canada**: Powered by Remote, allows U.S. businesses to hire full-time employees in Canada without a local entity.

All offerings are SaaS-based, delivered through a single integrated platform.

## Market Standing
- **Valuation/Market Cap**: Not publicly available (private company)
- **Key Metric**: Serves **more than 500,000 businesses** nationwide; processes tens of billions of dollars in payroll annually.
- **Notable Investors/Partners**: Not disclosed in provided sources
- **Growth Signals**:
  - Headcount: ~4,400 total employees, with ~1,200 in product & tech roles
  - Expanding into Canada via EOR partnership with Remote
  - Strong emphasis on AI integration to “absorb complexity” and improve customer experience

## Competitive Advantages
- **All-in-one platform**: Combines payroll, benefits, HR, and compliance in a single system, reducing the need for multiple vendors.
- **Automated tax filing and compliance**: Removes a major pain point for small business owners.
- **Customer obsession**: 9 out of 10 customer satisfaction rating; focus on serving an underserved market.
- **AI-first approach**: Uses AI to catch errors, answer questions, and streamline workflows, giving customers leverage without replacing human judgment.

## Strategic Focus
- **AI as a force multiplier**: Continued investment in AI to automate edge cases, improve speed, and enable higher-impact work for both customers and employees.
- **Expanding the platform**: Adding capabilities like EOR for Canada and deeper benefits integrations.
- **Scaling the small business economy**: Prioritizing features that help businesses grow and take care of their teams, with a long-term view of market leadership.

## Why Work Here
- **Culture values**: “Act with Bold Conviction,” “Raise the Bar, Learn Fast, Repeat,” “Customer Obsessed,” “Dream Big, then Make it Real.” Emphasis on directness, healthy debate, and ownership.
- **Work model**: Hybrid – most roles tied to hub locations (Denver, San Francisco, New York City, Scottsdale) with in-person collaboration **two days a week** (Tues/Wed for most; Wed/Thu in Scottsdale). Trusts employees to work remotely the rest of the time.
- **Benefits**: Comprehensive medical, dental, vision; family planning and fertility support; gender-affirming care; mental health support; paid vacation, sick leave, holidays, parental leave, and sabbaticals.
- **Community**: Employee-led affinity groups open to all; inclusive culture that values diversity.
- **Engineering culture**: Builders who enjoy untangling hard problems; high ownership; AI tools give engineers leverage to focus on judgment and creativity.

## Sources
1. [gusto.com/about](https://gusto.com/about) – Company overview, values, mission, headcount (500k+ businesses)
2. [gusto.com/about/careers](https://gusto.com/about/careers) – Culture, work model, benefits, AI philosophy
3. [gusto.com](https://gusto.com/) – Product details, pricing, features, customer stats
4. [job-boards.greenhouse.io/gusto](https://job-boards.greenhouse.io/gusto) – Current job openings (78 listed), departments
5. [builtin.com/company/gusto](https://builtin.com/company/gusto) – Employee count (4,405 total, 1,200 product+tech), office locations, hybrid policy

## Other roles at Gusto, Inc.

- [Senior Staff Software Engineer, Onboarding and Activation](https://feeny.ai/job/senior-staff-software-engineer-onboarding-and-activation-gusto-inc-san-francisco-d011gstd3taf) — San Francisco, CA
- [Partner Manager, Consumer Fintech Partnerships](https://feeny.ai/job/partner-manager-consumer-fintech-partnerships-gusto-inc-denver-4afs2rc3ans1) — Denver, CO / New York New York, United States / San Francisco, CA
- [Performance Marketing Manager, Paid Social](https://feeny.ai/job/performance-marketing-manager-paid-social-gusto-inc-burlingame-1qa6gsbsq0ax) — Burlingame, CA / Denver, CO / New York New York, United States / San Francisco, CA / Scottsdale Arizona, United States
- [Partner Manager, Gusto Pro](https://feeny.ai/job/partner-manager-gusto-pro-gusto-inc-atlanta-g45rbjfa7qhg) — Atlanta, GA / Denver, CO / New York New York, United States / Phoenix, AZ / San Francisco, CA / Toronto, Canada
- [GTM Insights & Operations](https://feeny.ai/job/gtm-insights-operations-gusto-inc-denver-nzr30m3pkagq) — Denver, CO
- [Senior Compensation Partner](https://feeny.ai/job/senior-compensation-partner-gusto-inc-san-francisco-bhvw7445m8e4) — San Francisco, CA
- [Tax Operations Advocate](https://feeny.ai/job/tax-operations-advocate-gusto-inc-denver-468p3mqep9dq) — Denver, CO / Las Vegas, NV / Los Angeles, CA / Phoenix, AZ
- [Tax Operations Advocate](https://feeny.ai/job/tax-operations-advocate-gusto-inc-denver-c2f1v8y2dxs9) — Denver, CO / Las Vegas, NV / Los Angeles, CA / Phoenix, AZ
- [Senior Staff UX Researcher, Quantitative](https://feeny.ai/job/senior-staff-ux-researcher-quantitative-gusto-inc-denver-7k62nh843sxd) — Denver, CO / New York New York, United States / San Francisco, CA
- [Senior L&D Specialist](https://feeny.ai/job/senior-l-d-specialist-gusto-inc-denver-b36cqtrvrrk7) — Denver, CO / New York New York, United States / Phoenix, AZ / San Francisco, CA