GRC Analyst (Governance Risk & Compliance) | Denver, USA | Hybrid or Remote US

Join Pax8 and step onto the front line of security in one of the fastest-moving cloud marketplaces in the world , where every incident is an opportunity to learn, lead, and level up.

This isn’t a back-office compliance role.

This is about being the calm voice in the room when something goes sideways, and the steady hand that drives it to resolution.

What makes this role exciting

This is a career-defining early-career opportunity inside Pax8’s Trust and Security organisation.

You won’t be stuck on the edges of the action. From day one, you’ll be plugged into the heart of how Pax8 protects its partners, its people, and its platform, partnering with engineering, IT, legal, and comms to drive real outcomes.

You’ll be the first person in this role to take the Incident Commander seat during US working hours, a genuinely unique chance to build a function, shape how it runs, and grow with it.

Between incidents, you’ll dive into the broader GRC programme, corrective actions, technology risk, SOC 2, ISO 27001, PCI DSS, getting exposure across a modern, cloud-first business that very few entry-level roles can match.

If you’re energised by fast-moving environments, curious about security, and motivated to make a real dent on something that matters, this role puts you right at the centre of it.

Life at Pax8

Pax8 is redefining how businesses access and scale cloud technology and we’re doing it fast.

We combine scale-up energy ⚡ with global reach , creating an environment where ideas move quickly, decisions are made with intent, and people are trusted to lead.

You’ll join a culture that values:

• Straight talk and real collaboration 🤝

• Experimentation and continuous improvement

• Leaders who get into the detail - and make things happen

What you’ll own

You’ll sit within the GRC team and play a hands-on, dual-focus role — leading on security incidents and helping run the broader governance, risk, and compliance programme.

⚙️ Lead Security incident response
Step in as Incident Commander as part of a shared on-call rotation. Triage, document, and coordinate response activities across engineering, IT, and security — keeping the room calm, the timeline clear, and the next decision sharp.

Turn lessons into action
Maintain clear incident records, timelines, and post-incident reports. Partner with the response team to find root causes, drive remediation through to closure, and sharpen the runbooks for next time.

🧭 Drive corrective actions
Take ownership of corrective actions arising from incidents, audits, and assessments. Track open items, follow up with owners, escalate when things stall — and keep risk moving in the right direction.

🤝 Support compliance & governance
Help with evidence collection and control testing across SOC 2, ISO 27001, PCI DSS, and NIST CSF. Maintain GRC tooling, policies, and control documentation. Pitch in on business continuity and disaster recovery work

🤖 Manage technology risk
Support intake, assessment, and monitoring of risks across Pax8 systems and vendors — building the kind of judgement that turns a junior analyst into a trusted advisor

Bring AI into the workflow

Develop a high-performing operations organisation that scales with Pax8 - setting the bar for clarity, pace, and impact.

The impact you’ll have

• Your fingerprint will be on how Pax8 protects what it’s built.
• Incidents will be resolved faster, with cleaner timelines and clearer accountability
• The GRC team will move faster because corrective actions actually close
• Pax8’s partners will trust us more because we run a tighter ship
• You’ll grow into a recognised Incident Commander inside 12 months
• In short: you’ll help turn pressure moments into precision response

🧠 What you bring

• You’re early in your career but you’re already wired the right way , curious, calm under pressure, and someone who follows through.
• Reasonable experience in security, IT, audit, compliance, or a related field (internships and rotational programmes count)
• Strong written and verbal communication — you can document an incident timeline clearly and concisely while it’s still unfolding
• Confidence to guide a room of senior stakeholders on the next right step
• Comfort with ambiguity, a bias for follow-through, and the judgement to know when to escalate
• Willingness to participate in a shared on-call rotation, including occasional nights and weekends
• A Bachelor’s degree in Cybersecurity, Information Systems, IT, Computer Science, or equivalent practical experience
• Bonus: exposure to SOC 2, ISO 27001, NIST CSF, or PCI DSS
• Bonus: familiarity with GRC, ticketing, or SIEM tooling (LogicGate, ServiceNow, Jira, SumoLogic)
• Bonus: entry-level certifications such as Security+, SSCP, CISA, or Network+
• Bonus: experience in a SaaS, cloud, or MSP/channel environment
• Curiosity about AI — and a willingness to explore how it can make security work better
• Above all, you’re proactive — someone who takes ownership and runs with it, rather than waiting to be told what to do.
  

️Trust and how we hire

At Pax8, we care deeply about building genuine, trust based relationships — starting with how we hire.

To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you're applying as your authentic self, you have nothing to worry about — we're excited to meet you.

We also use thoughtfully applied AI-enabled tools to support our hiring process. These tools may assist with tasks such as reviewing or prioritising applications, but hiring decisions are made by our people. More information is available in our Recruitment Privacy Notice. If you have questions about how we hire or would prefer not to have your application supported by these tools, you can opt out at any part of our process.

Apply even if you don’t meet every criterion

We encourage you to apply even if you don't meet 100% of the criteria. We're committed to diverse perspectives, inclusive hiring and sharing your transferrable skills. To fulfil this role, you must hold valid right to work in the United States.

Benefits (USA)

Compensation: Qualified candidates can expect a salary beginning at $75,000 - $90,000 depending on experience

Posting

• This role is expected to close on 28th May 2026

• Tech set up to support great Home and In-office working

• Hybrid, Home Office & Flexible working

• Designated Office Location: Denver.

If you struggle to get “time out” we’re happy to accommodate early/late conversations and interview times or if you have any queries you can ring the talent partner Will Patterson managing this role from the UK on +44 117 471 3268 (please be mindful of time zones & response times) (No Agencies Please)

Your Denver office

Pax8 offices are open, collaborative spaces designed to energise and connect teams. Our Denver location offers state‑of‑the‑art coffee stations, wellness and breakout areas, hot‑desking options with state of the art 34 inch curved screens and cell phone chargers, creative spaces, and regular social events, mini market with a curated selection of grab & go snacks and soda fridge — all designed to help you do your best work in a supportive, community‑driven environment.

Grow your career with us

There's extensive room for a talented individual to grow at pace — whether that's advancing quickly in this role or exploring one of the many opportunities across our global organisation. You'll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, you'll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. We'll give you the space, trust, and the right projects to help you thrive — and full visibility of what it takes to reach your next level.

About Pax8

Our mission is to build the managed intelligence marketplace and empower small businesses to do more with smarter technology. We are a fast-growing, dynamic, and high-energy organisation with a start-up feel, allowing you to make a meaningful impact on the business. Culture is also important to us, and at Pax8, it's business, and it IS personal. We are passionate, creative, and unconventional. We work hard, keep it fun, and expect the best! We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life.

Pax8 Values ?

Culture is important to us, and at Pax8, it’s business, and it IS personal. We are passionate, creative, and unconventional. We work hard, keep it fun, and expect the best! We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life.

We embody our core values — We before Me 🤝, fostering teamwork and collaboration; Compassionate Candor , promoting open and honest communication with kindness; Light Up Learning , continuously growing and sharing knowledge; Seek to Understand , valuing diverse perspectives and thoughtful engagement; Do What You Say ✅, ensuring trust and accountability; and Driven by Passion , bringing energy and dedication to everything we do—as we strive to innovate and empower our partners every day.

✅Background checks

As part of our hiring process, we are required to undertake pre-employment checks on all candidates that are successful in their application with Pax8. As part of these checks Pax8 will request ID verification, reference requests and qualification checks (additional checks may be completed for certain countries, such as criminal and financial). All checks are completed by our third-party provider, First Advantage. Once checks have been completed all candidates will receive a copy for their records.

⚖️ Equal opportunities

Pax8 are an equal opportunities employer and welcome individuals who are in possession of the appropriate requirements to work within the country you have applied for. Offered individuals will be asked to undertake identity, security compliance and reference checks. Your privacy is important to us. Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes.

Privacy notice: https://www.pax8.com/en-us/terms/job-applicant-privacy-notice/

#LI-Hybrid
#LI-WP