Senior Remote GRC & Security Risk Analyst

Xbow; California (MO); Hybrid; USD 121,000 - 161,000; Full time

Benefits offered by this job

Stock options

Remote-first

Job summary

XBOW, redefining cybersecurity with an AI-driven autonomous pentester, seeks an Information Security Analyst, GRC to scale security reviews, vendor risk, and regulatory compliance. You will coordinate with Legal on contracts and drive risk management across IT, Security, Engineering, and Sales in a fast-moving environment.

You’ll help shape policies, risk registers, and evidence for SOC 2, ISO 27001, and other frameworks while advocating pragmatic, scalable risk practices across the company.

Qualifications

• 7+ years of experience in risk, compliance, security assurance, or related roles.
• Hands-on technical experience in Engineering, IT or security operations.
• Experience completing or reviewing technical security questionnaires and customer risk assessments.
• Familiarity with common security frameworks (SOC 2, ISO 27001, NIST, GDPR, HIPAA).
• Experience conducting or supporting vendor/ third-party risk assessments.
• Strong written communication; ability to explain complex security concepts clearly.
• Highly organized and detail-oriented, with pragmatic risk approach.
• Comfortable in a fast-moving, remote-first startup environment.
• Familiar with using modern AI tooling to improve productivity whilst managing risk.

Responsibilities

• Support customers with security questionnaires, risk assessments, and due-diligence requests.
• Explain XBOW’s security controls, architecture, and compliance posture to Sales and Customer teams.
• Assess and manage third-party and vendor security risk.
• Investigate and resolve alerts using the Vanta product.
• Maintain risk assessment frameworks, methodologies, and documentation.
• Track remediation of identified risks with internal stakeholders.
• Contribute to compliance initiatives aligned with SOC 2, FedRAMP, ISO 27001, and ISO 42001.
• Maintain clear risk registers, policies, and supporting evidence.
• Coordinate risk management sessions and processes.
• Identify opportunities to streamline and automate risk and compliance as the company scales.
• Support audits, customer reviews, and internal assurance activities.

Skills

Risk management

Compliance

Security assurance

Security questionnaires

Vendor risk

Written communication

Regulatory frameworks

Remote work

Tools

Vanta

Job description

XBOW, redefining cybersecurity with an AI-driven autonomous pentester, seeks an Information Security Analyst, GRC to scale security reviews, vendor risk, and regulatory compliance. You will coordinate with Legal on contracts and drive risk management across IT, Security, Engineering, and Sales in a fast-moving environment.

You’ll help shape policies, risk registers, and evidence for SOC 2, ISO 27001, and other frameworks while advocating pragmatic, scalable risk practices across the company.