Security GRC Analyst — Risk, Policy & Audit

Pinterest; San Francisco (CA); On-site; USD 124,000 - 255,000; Full time

Job summary

Pinterest is seeking an IC14 Security Engineer - GRC Senior Analyst to strengthen security governance and assurance programs. You will drive risk management, policy governance, control testing, and audit support in a fast-growing environment.

You will partner across Security, Engineering, IT, Legal, Internal Audit and other teams to improve the control environment and evidence quality. This role emphasizes scalable, collaborative security practices in a SaaS context.

Qualifications

• Bachelor's degree in a relevant field or equivalent experience.
• Experience supporting SOC 2 Type 2 audits in a cloud-based or high-growth environment.
• Ability to write clear, practical security policies, standards, and process documentation.
• Experience maintaining risk registers and supporting formal risk assessment processes.
• Strong organizational and cross-functional collaboration skills.
• Experience communicating risk clearly to technical and non-technical stakeholders.

Responsibilities

• Maintain and Administer the security risk register with risks, updates, remediation, owners, and reporting.
• Collaborate with Security, Engineering, IT, Legal, and Internal Audit to identify, document, assess, and monitor risks.
• Draft and manage the lifecycle of security policies, standards, and procedures.
• Support SOC 2 Type 2 audits and related control testing activities.
• Track security awareness training metrics and remediation actions.
• Prepare dashboards and reports for leadership on risk, compliance, and audit status.

Skills

Security governance

Risk management

Policy writing

Audit support

SOC 2

CIS Controls

NIST CSF

ISO 27001

Communication skills

Cross-functional collaboration

Education

Bachelor's degree in Computer Information Systems or Cybersecurity

Tools

GRC tools

Policy management systems

Job description

Pinterest is seeking an IC14 Security Engineer - GRC Senior Analyst to strengthen security governance and assurance programs. You will drive risk management, policy governance, control testing, and audit support in a fast-growing environment.

You will partner across Security, Engineering, IT, Legal, Internal Audit and other teams to improve the control environment and evidence quality. This role emphasizes scalable, collaborative security practices in a SaaS context.