Information Security Analyst, GRC

🔥 19 hours ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

🔐 Security Analyst

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

XBOW

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2024

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

XBOW is an AI-powered penetration testing platform that delivers human-level security testing at machine speed. It utilizes hundreds of specialized AI agents that collaborate to discover, validate, and exploit vulnerabilities autonomously, allowing companies to test their applications rapidly. With a focus on comprehensive coverage and efficiency, XBOW enables continuous security validation for applications, ensuring they remain secure against emerging threats. Its capabilities include testing every endpoint and attack vector, making it a crucial tool for organizations looking to maintain security without the traditional bottlenecks of manual pentesting.

📋 Description

• Support customers and prospects by completing technical security questionnaires, risk assessments, and due-diligence requests • Partner with Sales and Customer teams to explain XBOW’s security controls, architecture, and compliance posture • Assess and manage third-party and vendor security risk, including SaaS providers and service partners • Investigate and resolve alerts to maintain compliance using Vanta • Help maintain and improve risk assessment frameworks, methodologies, and documentation • Track and support remediation of identified risks with internal stakeholders • Contribute to compliance initiatives aligned with SOC 2, FedRAMP 20x, ISO 27001, and ISO 42001 • Maintain risk registers, policies, and supporting evidence • Coordinate risk management sessions and processes • Identify opportunities to streamline and automate risk and compliance processes • Support audits, customer reviews, and internal assurance activities as needed • Collaborate with IT, Security, Engineering, Legal, Sales, and Customer teams as an individual contributor

🎯 Requirements

• 7+ years of experience in risk, compliance, security assurance, or related roles • Experience in hands-on technical roles, for example in Engineering, IT, or operational security • Hands-on experience completing or reviewing technical security questionnaires and customer risk assessments • Familiarity and experience with security compliance and data protection frameworks such as SOC 2, ISO 27001, NIST, GDPR, and HIPAA • Experience conducting or supporting vendor/third-party risk assessments • Strong written communication skills and ability to explain complex security concepts clearly • Highly organized and detail-oriented, with a pragmatic approach to risk • Comfortable working in a fast-moving, remote-first startup environment • Familiarity with modern AI tooling to improve productivity while managing risk • Experience in a SaaS or security-focused company is advantageous • Experience handling Subject Access Requests for GDPR is advantageous • Security or risk certifications such as CRISC or CISSP are advantageous • Knowledge of cloud security best practices is advantageous

🏖️ Benefits

• Meaningful stock options • Opportunity to learn from and collaborate with top security and AI experts • Work on complex technical challenges that support the foundation of the company • Remote-first work arrangement • Work from anywhere, with regular opportunities to meet in person • Supported travel to collaborate with colleagues in person