Senior Security Analyst — AI-Driven GRC & Compliance

Valon; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Valon is hiring a Sr. Security Analyst to join its growing security team. You will collaborate with the Head of Security GRC to safeguard systems, cloud infrastructure, products and data while driving risk-based, AI-assisted GRC initiatives.

The role emphasizes automating compliance workflows, managing risk registers, and partnering with cross-functional teams to protect assets in a regulated environment. Remote-friendly, based in the US.

Qualifications

• Proven experience in a security analyst role focusing on compliance, risk management and program management.
• Experience with security frameworks (SOC 2, NIST CSF, ISO 27001/2, CIS, NYDFS, CCPA).
• Basic knowledge of cloud environments.

Responsibilities

• Implement and maintain security frameworks and regulatory requirements (SOC 2, NIST CSF, CIS, NYDFS, CCPA).
• Support audits, evidence gathering and remediation tracking.
• Build AI-assisted GRC workflows for scalable security functions.
• Maintain risk registers, risk assessments and remediation processes.
• Manage security governance projects and cross-functional collaboration.
• Track security metrics, KPIs and reporting for stakeholders.
• Assist with customer security due diligence processes.
• Review and monitor security policies for compliance.
• Facilitate remediation across stakeholders and manage vendor security risk assessments.
• Support on-call, security monitoring, incident management and security awareness training.

Skills

Security compliance

Risk management

Security program management

Security issue management

Security governance

Security metrics & KPIs

GRC automation

AI-assisted processes

Job description

Valon is hiring a Sr. Security Analyst to join its growing security team. You will collaborate with the Head of Security GRC to safeguard systems, cloud infrastructure, products and data while driving risk-based, AI-assisted GRC initiatives.

The role emphasizes automating compliance workflows, managing risk registers, and partnering with cross-functional teams to protect assets in a regulated environment. Remote-friendly, based in the US.