Senior Security Analyst - AI-Driven GRC & Compliance

Apply; New York, Northern (NY, KY); Hybrid; USD 115,000 - 145,000; Full time

Benefits offered by this job

Equity stake

401k plan

Health benefits

Commuter benefits

Team outings

Flexible PTO

Parental leave

Job summary

Valon is seeking a Sr. Security Analyst to join its Security team in a pivotal role managing security governance, risk, and compliance across cloud infrastructure and products.

You will collaborate with cross-functional teams to protect critical assets and strengthen trust with customers. You will leverage AI-assisted processes to automate and scale GRC workflows, support audits, and drive proactive risk remediation while contributing to a regulated fintech environment with modern security

Qualifications

• Proven experience as a security analyst focused on compliance, risk, and program management.
• Experience with security frameworks (SOC 2, NIST CSF, ISO 27001/2, CIS) and NYDFS/CCPA.
• Cloud security knowledge and ability to automate GRC processes.
• Strong communication and collaboration with technical and non-technical stakeholders.

Responsibilities

• Implement and maintain compliance with SOC 2, NIST CSF, CIS and NYDFS.
• Support audits, evidence gathering and remediation tracking.
• Build AI-assisted GRC workflows for scaling security functions.
• Maintain risk register, risk assessments and remediation processes.
• Manage security governance projects and KPIs.
• Support customer security due diligence and policy reviews.
• Facilitate remediation across stakeholders and vendor risk assessments.
• Oversee on-call and security operations activities.

Skills

Security analyst

GRC processes

Security frameworks

Cloud security basics

Automation mindset

Stakeholder communication

AI tooling

Issue management

Education

Bachelors in CS

CISSP

CISM

CompTIA Security+

Tools

AWS

Azure

SIEM

GRC tools

Job description

Valon is seeking a Sr. Security Analyst to join its Security team in a pivotal role managing security governance, risk, and compliance across cloud infrastructure and products.

You will collaborate with cross-functional teams to protect critical assets and strengthen trust with customers. You will leverage AI-assisted processes to automate and scale GRC workflows, support audits, and drive proactive risk remediation while contributing to a regulated fintech environment with modern security