Security GRC Analyst

Pinterest·San Francisco, CA, US; Remote, USRemotesenior

In short

→Analista de GRC que gestiona riesgos y cumplimiento en seguridad
→Día a día: registra riesgos, prueba controles, apoya auditorías y reporta métricas a liderazgo
→Lo destacado: trabaja con IA en el proceso de contratación y en la tarea diaria

Proficiency in English is required

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓4+ años en gobernanza, riesgo y cumplimiento (GRC)
✓Experiencia con auditorías SOC 2 Type 2
✓Habilidades para redactar y gestionar políticas de seguridad
✓Capacidad para realizar pruebas de controles según CIS Controls
✓Experiencia en gestión de riesgos y seguimiento de remediaciones
✓Habilidades de comunicación y colaboración con múltiples equipos

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

SOC 2 Type 2CIS ControlsRisk RegisterSecurity PoliciesControl TestingAudit SupportAwareness Training TrackingRemediation TrackingDashboardsReporting

Who should you write to at Pinterest?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

About Pinterest: Millions of people around the world come to our platform to find creative ideas, dream about new possibilities and plan for memories that will last a lifetime. At Pinterest, we’re on a mission to bring everyone the inspiration to create a life they love, and that starts with the people behind the product. Discover a career where you ignite innovation for millions, transform passion into growth opportunities, celebrate each other’s unique experiences and embrace the flexibility to do your best work. Creating a career you love? It’s Possible. At Pinterest, AI isn't just a feature, it's a powerful partner that augments our creativity and amplifies our impact, and we’re looking for candidates who are excited to be a part of that. To get a complete picture of your experience and abilities, we’ll explore your foundational skills and how you collaborate with AI. Through our interview process, what matters most is that you can always explain your approach, showing us not just what you know, but how you think. You can read more about our AI interview philosophy and how we use AI in our recruiting process here . Pinterest’s Security team (Pinfosec) is seeking an IC14 Security Engineer - Security Governance, Risk & Compliance (GRC Senior Analyst) to support and strengthen our security governance and assurance programs. This role is ideal for someone who is detail-oriented, collaborative, and motivated by building scalable security processes that help the business manage risk effectively. Reporting to the Interim Head of Security Governance, Risk & Compliance, this individual contributor will partner closely with Security, Engineering, IT, Legal, Internal Audit, and other cross-functional stakeholders to help maintain and improve Pinterest’s security control environment. The role will contribute to core GRC activities including risk management, policy governance, control testing, audit support, awareness tracking, and internal risk assessments. What you’ll do: • Administer and maintain the security risk register, including tracking identified risks, updates, remediation activities, owners, and reporting outputs. • Partner with stakeholders across Security and the business to identify, document, assess, and monitor security risks. • Draft, review, update, and manage the lifecycle of security policies, standards, and supporting procedures. • Support the planning, coordination, evidence collection, and follow-up activities for Pinterest’s annual SOC 2 Type 2 audit. • Track and report on security awareness training metrics, completion rates, exceptions, and follow-up actions. • Execute security control testing activities aligned to CIS Controls and document testing outcomes, findings, and remediation recommendations. • Conduct and support risk assessments in partnership with internal Security colleagues and relevant business stakeholders. • Help monitor control effectiveness and identify opportunities to improve process maturity, consistency, and evidence quality. • Prepare dashboards, reports, and presentations for leadership on risk, compliance, audit, and awareness program status. • Support remediation tracking for control gaps, audit findings, and risk treatment actions. • Contribute to the continuous improvement of Pinterest’s GRC framework, documentation, and operating rhythms. • Maintain strong working relationships with internal partners to promote a practical, business-aligned approach to security governance and compliance. What we are looking for: • 4+ years experience in security governance, risk, c

Looking for something similar?

Leave your email and we'll alert you when matching jobs appear.

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.