Security GRC Analyst

📋 Description

• Administer and maintain the security risk register
• Partner with stakeholders to identify, document, assess, and monitor security risks
• Draft, review, update, and manage lifecycle of security policies, standards, and procedures
• Support annual SOC 2 Type 2 audit
• Track and report on security awareness training metrics
• Execute security control testing aligned to CIS Controls

🎯 Requirements

• 4+ years experience in security governance, risk, compliance, audit, or security assurance roles
• Working knowledge of core security and compliance frameworks such as SOC 2, CIS Controls, ISO
• Experience supporting audits, assessments, or control testing programs in a technology or SaaS
• Ability to write clear, practical, and actionable security policies, standards, and process
• Experience maintaining risk registers and supporting formal risk assessment processes
• Strong organizational skills with the ability to manage multiple workstreams and deadlines

🎁 Benefits

• Equity
• Flexible work model (PinFlex)
• Culture at Pinterest and benefits available (see careers page)