Teams at Vibes

Build and improve company-wide security controls across cloud infrastructure, applications, identity, vulnerability management, detection, incident response, secure development, and AI systems. Review code and infrastructure as code, automate security workflows, manage vulnerabilities and incidents, conduct tabletop exercises, support audits, and communicate risk while partnering with engineering, IT Support, and GRC.

The GRC Analyst collects audit evidence, coordinates audits, tests controls, tracks findings, conducts access and inventory reviews, assesses vendor risk, responds to customer security questionnaires and RFPs, and administers policy lifecycles. The role also maintains questionnaire answer libraries and improves AI-assisted compliance workflows while partnering with control owners to resolve gaps and support customer trust.

Own software licensing, SaaS and hardware inventories, renewals, vendor contracts, procurement workflows, risk assessments, and spend tracking. The role identifies unused licenses, supports vendor negotiations, coordinates approvals, and connects access, equipment, and licenses with employee onboarding and offboarding. Success includes preventing surprise renewals, recovering unused seats, achieving savings, and improving procurement processes.