Security GRC Analyst

Join Pinterest's Security team as a Security Governance, Risk & Compliance (GRC Senior Analyst). In this role, you will support and strengthen our security governance and assurance programs, partner with cross-functional stakeholders, and contribute to core GRC activities. You will also administer and maintain the security risk register, draft and manage security policies, support the annual SOC 2 Type 2 audit, and prepare reports for leadership. The ideal candidate will have 4+ years of experience in security governance, risk, compliance, audit, or security assurance roles, strong communication skills, and a relevant bachelor's degree.

• Contribuer aux activités de gouvernance, de gestion des risques et de conformité (GRC) de base, y compris la gestion des risques, la gouvernance des politiques, les tests de contrôle, le soutien aux audits, le suivi de la sensibilisation et les évaluations internes des risques.
• Administrer et maintenir le registre des risques de sécurité, y compris le suivi des risques identifiés, des mises à jour, des activités de remédiation, des propriétaires et des rapports.
• Collaborer avec les parties prenantes pour identifier, documenter, évaluer et surveiller les risques de sécurité, et rédiger, examiner, mettre à jour et gérer le cycle de vie des politiques, des normes et des procédures de sécurité.

• Experience maintaining risk registers and supporting formal risk assessment processes
• Comfort working cross-functionally and gathering information or evidence from technical and non-technical stakeholders
• Ability to write clear, practical, and actionable security policies, standards, and process documentation
• Strong organizational skills with the ability to manage multiple workstreams and deadlines with attention to detail
• Experience supporting audits, assessments, or control testing programs in a technology or SaaS environment
• A pragmatic, collaborative mindset and a desire to help teams meet security requirements in a scalable way
• 4+ years experience in security governance, risk, compliance, audit, or security assurance roles
• Strong written and verbal communication skills, including the ability to summarize risk and compliance issues clearly
• Working knowledge of core security and compliance frameworks such as SOC 2, CIS Controls, ISO 27001, NIST CSF, or similar
• Bachelor’s degree in a relevant field such as Computer Information systems or Cybersecurity, or equivalent experience
• Experience supporting SOC 2 Type 2 audits in a cloud-based or high-growth technology environment
• Familiarity with security awareness program administration and reporting
• Experience performing or coordinating control testing mapped to recognized frameworks such as CIS Controls
• Knowledge of common enterprise security domains, including identity and access management, logging and monitoring, vulnerability management, endpoint security, and third-party risk
• Relevant certifications such as Security+, CISA, CRISC, CISSP, or similar are a plus