Security Analyst

📋 Description

• Run the customer security questionnaire program end-to-end and build a reusable answer library.
• Operate risk and control workflows; triage risks and track closure to completion.
• Run GRC analyses to align standards and controls with policies.
• Build and maintain the GRC toolchain; automate workflows and integrations.
• Create internal GRC docs and company-wide policies.

🎯 Requirements

• 4+ years in security compliance, GRC, or related fields.
• Familiar with ISO 27001/27002, SOC 2, PCI DSS, GDPR/CPRA and translating to day-to-day controls.
• Hands-on experience with evidence collection, control tracking, risk register upkeep.
• Automation-focused; builds tooling and repeatable workflows to replace manual work.
• Comfort with GRC platforms, ticketing, docs, and keeping data clean.
• Clear writing and turning dense requirements into usable guidance.

🎁 Benefits

• Equity + benefits
• Relocation assistance may be available
• Hybrid work schedule: in-office 2 days/week in SF Bay Area
• Reasonable accommodations during the interview process