Loading...
Mid LevelFull-timeRustGitAI
Salary Range
$97,750 - $132,250 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a detail-oriented Governance, Risk & Compliance Analyst to help scale our security and trust function at XBOW. This role involves supporting customer and prospect security reviews, assessing third-party vendor risk, and continuously improving how we identify and manage risk across the business.
Key Responsibilities
- →Support customers and prospects by completing technical security questionnaires, risk assessments, and due-diligence requests
- →Partner with Sales and Customer teams to explain XBOW’s security controls, architecture, and compliance posture
- →Assess and manage third-party and vendor security risk, including reviews of SaaS providers and service partners
- →Help maintain and improve risk assessment frameworks, methodologies, and documentation
- →Track and support remediation of identified risks in collaboration with internal stakeholders
- →Contribute to compliance initiatives aligned with frameworks such as SOC 2 and ISO 27001
- →Maintain clear, well-structured risk registers, policies, and supporting evidence
- →Coordinate risk management sessions and processes
- →Identify opportunities to streamline and automate risk and compliance processes as the company scales
- →Support audits, customer reviews, and internal assurance activities as needed
Requirements
- ✓3–5+ years of experience in risk, compliance, security assurance, or related roles
- ✓Hands-on experience completing or reviewing technical security questionnaires and customer risk assessments
- ✓Familiarity and experience with common security and compliance frameworks (e.g. SOC 2, ISO 27001, NIST, FedRAMP)
- ✓Comfortable assessing technical controls and working with engineers to understand system architecture
- ✓Experience conducting or supporting vendor / third-party risk assessments
- ✓Strong written communication skills, with the ability to explain complex security concepts clearly
- ✓Highly organized and detail-oriented, with a pragmatic approach to risk
- ✓Comfortable working in a fast-moving, remote-first startup environment
Free to sign up. Takes 30 seconds.
