Security GRC Analyst

we are looking for: 4+ years experience in security governance, risk, compliance, audit, or security assurance roles. Working knowledge of core security and compliance frameworks such as SOC 2, CIS Controls, ISO 27001, NIST CSF, or similar. Experience supporting audits, assessments, or control testing programs in a technology or SaaS environment. Ability to write clear, practical, and actionable security policies, standards, and process documentation. Experience maintaining risk registers and supporting formal risk assessment processes. Strong organizational skills with the ability to manage multiple workstreams and deadlines with attention to detail. Comfort working cross-functionally and gathering information or evidence from technical and non-technical stakeholders. Strong written and verbal communication skills, including the ability to summarize risk and compliance issues clearly. A pragmatic, collaborative mindset and a desire to help teams meet security requirements in a scalable way. Bachelor’s degree in a relevant field such as Computer Information systems or Cybersecurity, or equivalent experience. Preferred qualifications: Experience supporting SOC 2 Type 2 audits in a cloud-based or high-growth technology environment. Familiarity with security awareness program administration and reporting. Experience performing or coordinating control testing mapped to recognized frameworks such as CIS Controls. Knowledge of common enterprise security domains, including identity and access management, logging and monitoring, vulnerability management, endpoint security, and third-party risk. Relevant certifications such as Security+, CISA, CRISC, CISSP, or similar are a plus. In-Office Requirement Statement: We let the type of work you do guide the collaboration style. That means we're not always working in an office, but we continue to gather for key moments of collaboration and connection. This role will need to be in the office for in-person collaboration 1-2 times/quarter and therefore can be situated anywhere in the country. Relocation Statement: This position is not eligible for relocation assistance. Visit our PinFlex page to learn more about our working model. #LI-REMOTE At Pinterest we believe the workplace should be equitable, inclusive, and inspiring for every employee. In an effort to provide greater transparency, we are sharing the base salary range for this position. The position is also eligible for equity. Final salary is based on a number of factors including location, travel, relevant prior experience, or particular skills and expertise. Information regarding the culture at Pinterest and benefits available for this position can be found here . US based applicants only $123,696 — $254,667 USD Our Commitment to Inclusion: Pinterest is an equal opportunity employer and makes employment decisions on the basis of merit. We want to have the best qualified people in every job. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, national origin, religion or religious creed, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, age, marital status, status as a protected veteran, physical or mental disability, medical condition, genetic information or characteristics (or those of a family member) or any other consideration made unlawful by applicable federal, state or local laws. We also consider qualified applicants regardless of criminal histories, consistent with legal