About the role
GRC Coordinator GRC Coordinator
Who we are Our mission at Capacity is to help teams do their best work through our AI-powered support automation platform. Capacity provides everything you need to automate support and business processes in one powerful omni-channel platform. We believe that each individual voice, perspective and background brings inherent value to enhance our product, serve our customers and generate more ideas to solve complex problems. By continuing to hire talented, driven and humble teammates, we have the opportunity to see Capacity become a premier brand enterprise SaaS platform. Capacity has raised over $100 millio n dollars from over 150 investors, giving us the opportunity to make ambitious investments in our team and big bets on our future. Our total addressable market is enormous. Any company that wants to grow revenue, reduce costs, and improve customer and employee satisfaction is an opportunity for Capacity to shine. Why this job is exciting
The role: We're looking for a well-organised, detail-focused GRC Coordinator to join our growing Governance, Risk & Compliance (GRC) team. This is a great opportunity for someone early in their compliance or security career, or moving across from an administrative, audit-support, or IT-support background, who wants to build a career in GRC within a growing SaaS group. You'll be the organisational engine of the GRC team, owning our Third-Party Risk Management (TPRM) process day to day, triaging and coordinating incoming compliance requests, and keeping our work logged, prioritised, and moving. You won't be expected to be an expert in every framework we work with, you'll own the structure and flow of the work, and grow your knowledge with direct guidance and real mentorship. You'll report to the Director of GRC and work closely with the Senior Director of Global Risk & Compliance, with genuine room to grow as you develop.
Responsibilities: In this role, you will be responsible for the following: Own the day-to-day running of our Third-Party Risk Management (TPRM) process, coordinating vendor due diligence from intake through to sign-off with guidance from the wider team. Send, track, and chase vendor security questionnaires and assurance evidence (e.g. ISO 27001 certificates, SOC 2 reports, penetration test summaries). Maintain the vendor register, risk tiering, and reassessment schedules, keeping records accurate and audit-ready. Act as the first point of contact for incoming GRC requests including security questionnaires, customer and prospect due diligence, and general queries relating to ISO 27001, ISO 42001, GDPR and other data protection regulations, SOC 2, HIPAA, and PCI DSS. Triage and prioritise incoming requests, log them in Jira, and assign them to the right GRC team member, tracking each through to completion. Chase outstanding security awareness training, following up with individuals and managers to drive completion rates up. Attend team and stakeholder meetings, take clear notes, and capture actions in Jira. Help gather and organise compliance evidence for internal and external audits, under direction from the Director of GRC and the Senior Director of Global Risk & Compliance. Keep GRC documentation and trackers tidy, current, and audit-ready. Suggest improvements to how we organise and run GRC operations as you learn the ropes.
