Remote GRC Analyst: Drive SOC 2 & Security Compliance

Pinterest, Inc.; Stati Uniti; Remoto; USD 124.000 - 255.000; Tempo pieno

Vantaggi offerti da questo lavoro

Equity

Remote-first

Quarterly in-person collaboration

Descrizione del lavoro

Pinterest, Inc. is seeking a senior security governance, risk, and compliance (GRC) professional to strengthen a mature control environment across Security, Engineering, IT, Legal, and Internal Audit.

The role partners with security leadership to support recurring assurance activities and maintain a robust risk register. Responsibilities include drafting policies, managing audits such as SOC 2 Type 2, conducting control testing, and producing leadership dashboards on risk and compliance status.

Competenze

• 4+ years in security governance, risk, compliance, audit, or security assurance roles.
• Working knowledge of core security and compliance frameworks such as SOC 2, CIS Controls, ISO 27001, NIST CSF, or similar.
• Experience supporting audits, assessments, or control testing programs in a technology or SaaS environment.
• Demonstrated ability to write clear, practical security policies, standards, and process documentation.
• Strong organizational skills with the ability to manage multiple workstreams and deadlines.
• Comfort working cross-functionally with both technical and non-technical stakeholders.
• Bachelor's degree in a relevant field such as Computer Information Systems or Cybersecurity, or equivalent experience.

Mansioni

• Administer and maintain the security risk register, tracking risks, remediation activities, owners, and reporting outputs.
• Draft, review, and manage the lifecycle of security policies, standards, and procedures.
• Support planning, evidence collection, coordination, and follow-up for the annual SOC 2 Type 2 audit.
• Execute security control testing activities aligned to CIS Controls and document outcomes, findings, and remediation recommendations.
• Track and report on security awareness training metrics, completion rates, exceptions, and follow-up actions.
• Conduct and support risk assessments with internal Security colleagues and relevant business stakeholders.
• Prepare dashboards, reports, and presentations for leadership on risk, compliance, audit, and awareness program status.
• Support remediation tracking for control gaps, audit findings, and risk treatment actions.

Conoscenze

Security governance

Risk management

Security audit

Policy writing

Cross-functional collaboration

SaaS/cloud experience

Formazione

Bachelor's degree in Computer Information Systems or Cybersecurity

Strumenti

SOC 2

CIS Controls

ISO 27001

NIST CSF

Descrizione del lavoro

Pinterest, Inc. is seeking a senior security governance, risk, and compliance (GRC) professional to strengthen a mature control environment across Security, Engineering, IT, Legal, and Internal Audit.

The role partners with security leadership to support recurring assurance activities and maintain a robust risk register. Responsibilities include drafting policies, managing audits such as SOC 2 Type 2, conducting control testing, and producing leadership dashboards on risk and compliance status.