Senior Security Analyst

About the Role

We are seeking a motivated Sr. Security Analyst to join our growing team! As a key security member working closely with the Head of Security GRC and the Security team at Valon, you will play a critical role in ensuring the security of our organization's systems, cloud infrastructure, products and data.

This position requires a strong foundation in security risk and compliance principles, hands-on experience leveraging AI-assisted processes to strengthen GRC functions and operational activities, an automation first mindset, and a proactive approach to problem-solving. You will collaborate with cross-functional teams to protect our most critical assets and uphold trust with our customers and stakeholders.

Responsibilities

• Implement and maintain compliance with frameworks (SOC 2, NIST CSF, CIS) and regulatory requirements (NYDFS, GLBA, Safeguards, CCPA and related)
• Support internal and external security audits and exams, including evidence gathering and remediation tracking
• Build AI assisted GRC workflows for scaling GRC and security functions
• Maintain and manage security risk register, risk assessments, and remediation processes
• Manage security governance and compliance projects, and assist with other project management efforts
• Manage security metrics, KPIs and reporting
• Support customer security due diligence processes
• Review, manage, and monitor security policies for compliance
• Facilitate remediation for security and compliance issues across stakeholders
• Manage vendor security risk assessments
• Support on-call and operational security activities including security monitoring, incident management, general security reviews, security awareness and training, and other tasks

Ideal Background

• Proven experience in a security analyst related role, with a focus on security compliance, risk management, security issue management, and/or security program management.
• Experience with security and compliance frameworks and requirements (OWASP, SOC 2, NIST CSF / 800-53, ISO 27001/2, CIS, NYDFS, CCPA or others.)
• Basic knowledge of cloud security and public cloud environments
• Self-starter that can work autonomously, be agile, and balance multiple projects and operational efforts
• Excellent communication and collaboration skills, with the ability to explain security concepts to technical and non-technical stakeholders
• Experience developing, automating, and scaling security and GRC processes leveraging AI tools / agentic capabilities
• Experience maintaining a security risk register and issue management processes
• Strong organization and project management skills
• Experience or exposure to startup environments is a plus
• Experience or exposure to financial services or tech organizations is a plus

Minimum Qualifications

• Minimum of 5+ years as a security analyst or security program manager with relevant responsibilities and background
• Bachelor's degree in Computer Science, Information Security, Technology, or a related field
• Relevant security certifications based on career experience (CompTIA Security+, CC, SSCP or related), or seasoned career level (CISSP, CISM, CRISC or related)
• Experience with security compliance frameworks and risk assessments
• Experience with operational activities including issue management, security reviews, control monitoring, incident management, and reporting
• Hand-on experience with AI tooling and assisted workflows

Benefits

• Base Compensation Band: $115K - 145K. Base salary offered is determined by a number of factors including the candidate’s experience, qualifications, and skills
• This Base Compensation pay range applies to our New York City located staff and may differ according to location.
• Compensation: Competitive salary with a meaningful stake in the company via equity, and 401k plan
• Health & well-being: We’ll invest in your physical and mental well-being with comprehensive medical, dental, & vision benefits
• Commuter benefits: We offer pre-tax deductions for public transportation, rideshare services, and parking expenses to make your commute more affordable and convenient
• Grow together: Company wide orientation for you to successfully onboard and other learning & development opportunities including regular review cycles that feature 360 degree feedback
• Play together: Quarterly budgets for team and company outings. Use it for team swag, cooking classes, or team dinners!
• Generous time off: Flexible paid time off, sick days, and 11 company holidays
• Baby bonding time: 12 weeks off for both birthing and non-birthing parents - fully paid so you can focus your energy on your newest addition