Security GRC Analyst @Pinterest

Overview

Pinterest is seeking a Security Governance, Risk & Compliance (GRC) Senior Analyst to support and strengthen its security governance and assurance programs. The role is suited for detail-oriented individuals who are collaborative and motivated by building scalable security processes.

Key Responsibilities

• Administer and maintain the security risk register, tracking identified risks, updates, and remediation activities.
• Partner with stakeholders to identify, document, assess, and monitor security risks.
• Draft, review, and manage the lifecycle of security policies, standards, and procedures.
• Support Pinterest’s annual SOC 2 Type 2 audit through planning and evidence collection.
• Track and report on security awareness training metrics and exceptions.
• Execute security control testing activities and document findings and recommendations.
• Conduct risk assessments in partnership with internal Security colleagues and stakeholders.
• Prepare dashboards and reports for leadership on risk and compliance status.
• Support remediation tracking for control gaps and audit findings.
• Contribute to the continuous improvement of Pinterest’s GRC framework.
• Maintain strong relationships with internal partners for effective security governance.

Requirements

• 4+ years in security governance, risk, compliance, audit, or security assurance roles.
• Working knowledge of core security and compliance frameworks (e.g., SOC 2, CIS Controls).
• Experience supporting audits or control testing in a technology or SaaS environment.
• Ability to write clear and actionable security policies and documentation.
• Strong organizational skills and attention to detail.
• Excellent communication skills, both written and verbal.
• Bachelor’s degree in a relevant field or equivalent experience.

Benefits

Benefits details are accessible on Pinterest’s culture page, although specific benefits are not listed in the posting.

Location

Remote, US. The role requires in-office collaboration 1-2 times per quarter.

How to Apply

Interested candidates should submit their application via the company’s career page.

Deadline

No deadline stated.