GRC Security Analyst – AI Cybersecurity Startup (Remote)

XBOW; United Kingdom; À distance; GBP 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Stock options

Remote-first culture

Growth with experts

Résumé du poste

XBOW, a remote-first cybersecurity company, seeks a seasoned Information Security Analyst for GRC to scale risk and compliance across the business. You’ll partner with IT, Security, Legal, Sales, and Customer teams to communicate security posture and ensure regulatory alignment.

In this role, you’ll drive risk assessments, manage third-party risk, and support audits while advancing frameworks such as SOC 2, ISO 27001, and GDPR. Growth potential exists as the function matures.

Qualifications

• 7+ years in risk, compliance, security assurance, or related roles
• Hands-on technical experience in engineering, IT or operational security
• Experience completing or reviewing technical security questionnaires and risk assessments
• Familiarity with security frameworks (SOC 2, ISO 27001, NIST, GDPR, HIPAA)
• Experience with vendor / third-party risk assessments
• Strong written communication; ability to simplify complex security concepts
• Comfortable in a fast-moving, remote-first startup
• Familiar with modern AI tooling to boost productivity while managing risk

Responsabilités

• Complete security questionnaires, risk assessments, and due-diligence requests for customers and prospects
• Explain XBOW’s security controls, architecture, and compliance posture to Sales and Customer teams
• Assess and manage third-party and vendor security risk, including SaaS providers
• Investigate and resolve alerts to maintain compliance programs (Vanta)
• Maintain risk assessment frameworks, methodologies, and documentation
• Track remediation of identified risks with internal stakeholders
• Contribute to SOC 2, FedRAMP 20x, ISO 27001, ISO 42001 compliance initiatives
• Maintain risk registers, policies, and supporting evidence
• Coordinate risk management sessions and processes
• Identify opportunities to automate risk and compliance processes
• Support audits, customer reviews, and internal assurance activities

Connaissances

Risk & compliance

Technical hands-on

Security questionnaires

Vendor risk assessments

Regulatory frameworks

Written communication

Remote work adaptability

AI tooling familiarity

Description du poste

XBOW, a remote-first cybersecurity company, seeks a seasoned Information Security Analyst for GRC to scale risk and compliance across the business. You’ll partner with IT, Security, Legal, Sales, and Customer teams to communicate security posture and ensure regulatory alignment.

In this role, you’ll drive risk assessments, manage third-party risk, and support audits while advancing frameworks such as SOC 2, ISO 27001, and GDPR. Growth potential exists as the function matures.