Security GRC Analyst
Core
IC Security GRC Analyst supporting governance, risk, and compliance programs to manage security risks and ensure regulatory adherence.
Role type
Senior IC Security GRC Analyst
Builds
Security control environment, risk registers, policies, and audit evidence for Pinterest's business.
Domain
Technology / SaaS Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security governance, risk management, compliance frameworks (SOC 2, CIS Controls, ISO 27001, NIST CSF), audit support, control testing, policy drafting, risk register administration, stakeholder collaboration
Preferred skills
SOC 2 Type 2 audit support, security awareness program administration, control testing coordination, enterprise security domain knowledge (IAM, logging, vulnerability management)
Technologies
SOC 2, CIS Controls, ISO 27001, NIST CSF
Responsibilities
Administer security risk register and track remediation; Draft and manage security policies and standards; Support annual SOC 2 Type 2 audit; Execute security control testing; Track security awareness training metrics; Prepare leadership reports on risk and compliance status.
Seniority
Senior, hands-on IC
