MidFull TimeENAsia/Pacific
OVERVIEW OF 73 STRINGS:
73 Strings is an innovative platform providing comprehensive data extraction, monitoring, and valuation solutions for the private capital industry. The company's AI-powered platform streamlines middle-office processes for alternative investments, enabling seamless data structuring and standardization, monitoring, and fair value estimation at the click of a button. 73 Strings serves clients globally across various strategies, including Private Equity, Growth Equity, Venture Capital, Infrastructure and Private Credit.
Our 2025 $55M Series B, the largest in the industry, was led by Goldman Sachs, with participation from Golub Capital and Hamilton Lane, with continued support from Blackstone, Fidelity International Strategic Ventures and Broadhaven Ventures.
About the Role:
The GRC Analyst supports the company’s governance, risk, and compliance program for a cloud‑native SaaS environment. This role helps maintain SOC 2, ISO 27001, GDPR, and other compliance requirements; strengthens internal controls; supports audits; and collaborates across HR, Finance, Engineering, Product, and IT.
Key Responsibilities:
Governance & Policy Management
- Maintain and improve ISMS policies and procedures.
- Ensure controls align with policies and regulatory requirements.
- Communicate compliance requirements to cross‑functional teams.
Risk Management
- Support risk assessments and maintain the risk register.
- Identify control gaps and support remediation.
- Provide recurring risk reporting.
Compliance Operations
- Support SOC 2, ISO 27001, GDPR, and client audit requirements.
- Facilitate internal and external audits.
- Maintain compliance automation tooling.
- Track regulatory updates and framework changes.
- Support pre-sales due diligence
- Support customer compliance processes
Security & Engineering Collaboration
- Partner with Engineering, Product, and DevOps teams.
- Assist with cloud, DevOps, and access governance control reviews.
- Support the security awareness program.
Audit, Evidence & Reporting
- Manage audit findings to closure.
- Prepare GRC dashboards and metrics.
- Conduct internal control reviews.
Requirements:
- Bachelor’s degree in CS, Information Security, Business, or related.
- Strong communication and stakeholder management.
- Experience working cross‑functionally in fast‑moving environments.
- Ability to translate ambiguous requirements into actionable tasks.
- Experience identifying and remediating control gaps.
Preferred
- SOC 2 / ISO 27001 / GDPR exposure.
- Cloud platform familiarity (Azure/AWS/GCP).
- Experience with compliance automation tools.
- Certifications such as ISO 27001 LI/LA, CISA, Security+, CCSK.
