Information Security Analyst, GRC

📋 Description

• • X-Bow Systems Inc. is at the forefront of revolutionizing cybersecurity with its AI-powered autonomous pentester, aiming to scale offensive security to meet escalating global demands. As a company backed by Sequoia Capital and founded by pioneers behind GitHub Copilot and Advanced Security, X-Bow is not just adapting to the AI era but actively shaping its future in cybersecurity.
• • The mission is to proactively defeat malicious actors by leveraging AI to transform how offensive security is approached, ensuring organizations can identify and remediate vulnerabilities before they are exploited. X-Bow is more than a tool; it's a catalyst for change in the secure development lifecycle.
• • We are seeking a highly motivated and detail-oriented Information Security Analyst specializing in Governance, Risk, and Compliance (GRC) to join our growing security and trust function. This role is crucial for supporting our customer and prospect security reviews, meticulously assessing third-party vendor risks, and continuously enhancing our enterprise-wide risk identification and management processes.
• • This is an individual contributor position with significant potential for growth. As the risk and compliance function matures within X-Bow, there is a clear pathway for this role to expand in scope and leadership responsibilities, offering a dynamic career trajectory.
• • You will collaborate closely with cross-functional teams including Security, Engineering, Legal, Sales, and Customer Success. Your role will be pivotal in acting as a trusted partner, effectively communicating X-Bow's robust security posture and ensuring adherence to customer requirements and regulatory standards.
• • Key responsibilities include providing comprehensive support to customers and prospects by completing intricate technical security questionnaires, conducting thorough risk assessments, and responding to due-diligence requests. This involves translating complex technical security information into clear, actionable responses.
• • You will partner strategically with Sales and Customer Success teams to articulate and explain X-Bow’s security controls, system architecture, and overall compliance standing, building confidence and trust with our clientele.
• • A significant aspect of the role involves the assessment and ongoing management of security risks associated with third-party vendors and service partners, including in-depth reviews of SaaS providers and other critical suppliers.
• • You will play an active role in maintaining and refining our existing risk assessment frameworks, methodologies, and associated documentation, ensuring they remain current and effective.
• • The role requires tracking and actively supporting the remediation of identified risks, working collaboratively with various internal stakeholders to ensure timely and effective resolution.
• • You will contribute directly to compliance initiatives, aligning our practices with recognized industry frameworks such as SOC 2 and ISO 27001, ensuring X-Bow meets the highest standards of security and compliance.
• • Maintaining clear, well-structured risk registers, comprehensive policies, and meticulously organized supporting evidence will be a core duty, providing a transparent and auditable record of our risk management activities.
• • Coordination of risk management sessions and ongoing processes will be essential to foster a proactive and integrated approach to security risk across the organization.
• • You will be instrumental in identifying opportunities to streamline and automate risk and compliance processes, leveraging technology and innovative approaches to enhance efficiency as the company scales rapidly.
• • Furthermore, you will provide essential support for internal and external audits, customer reviews, and other assurance activities as required, demonstrating our commitment to security and compliance.
• • This role offers a unique opportunity to be part of a fast-paced, remote-first startup environment, contributing to the foundational security infrastructure of a cutting-edge AI cybersecurity company. Your work will directly impact our ability to build trust and security with our customers.