← All roles

Information Security Analyst, GRC

XBOW· IT & Corporate Security
Apply on company site
RemoteFull-timePosted 1mo ago

About the role

Information Security Analyst to support security reviews, vendor risk, and compliance programs within a remote-first, fast-moving SaaS security company.

Responsibilities

  • Support customers and prospects by completing technical security questionnaires, risk assessments, and due-diligence requests
  • Partner with Sales and Customer teams to explain XBOW’s security controls, architecture, and compliance posture
  • Assess and manage third-party and vendor security risk, including reviews of SaaS providers and service partners
  • Investigate and resolve alerts to stay compliant with our compliance programmes using the Vanta product
  • Help maintain and improve risk assessment frameworks, methodologies, and documentation
  • Track and support remediation of identified risks in collaboration with internal stakeholders
  • Contribute to compliance initiatives aligned with frameworks such as SOC 2, FedRAMP 20x, ISO 27001, and ISO 42001
  • Maintain clear, well-structured risk registers, policies, and supporting evidence
  • Coordinate risk management sessions and processes
  • Identify opportunities to streamline and automate risk and compliance processes as the company scales
  • Support audits, customer reviews, and internal assurance activities as needed

Qualifications

  • 7+ years of experience in risk, compliance, security assurance, or related roles
  • Experience in hands-on technical roles for example in Engineering, IT or operational security
  • Hands-on experience completing or reviewing technical security questionnaires and customer risk assessments
  • Familiarity and experience with common security compliance, and data protection frameworks (e.g. SOC 2, ISO 27001, NIST, GDPR, and HIPAA)
  • Experience conducting or supporting vendor / third-party risk assessments
  • Strong written communication skills, with the ability to explain complex security concepts clearly
  • Highly organized and detail-oriented, with a pragmatic approach to risk
  • Comfortable working in a fast-moving, remote-first startup environment
  • Familiar with using modern AI tooling to improve productivity whilst managing risk

Skills

Required:Security risk assessmentVendor / third-party riskCommunicationFrameworks & standardsGRC toolingRisk management

Benefits

  • Compensation & Equity: Competitive salary and meaningful stock options.
  • Growth: Opportunity to learn from and collaborate with top security and AI experts
  • Impact: Work on complex technical challenges that support the foundation of our company
  • Remote-First: Work from anywhere, with regular opportunities to meet in person
Last updated Sep 24, 2026. Interested? Apply on the company site.

About XBOW

Scale your offensive security in hours

XBOW is an AI-powered penetration testing platform that delivers human-level security testing at machine speed.

AI agentsenterprise-infrastructureoffensive securitypenetration testingwing-list-2026wing-list-2026-mid-stage
Company profileWebsite

More open roles at XBOW