Senior Security Analyst

• We are seeking a motivated Sr. Security Analyst to join our growing team! As a key security member working closely with the Head of Security GRC and the Security team at Valon, you will play a critical role in ensuring the security of our organization’s systems, cloud infrastructure, products and data
• This position requires a strong foundation in security risk and compliance principles, hands-on experience leveraging AI-assisted processes to strengthen GRC functions and operational activities, an automation first mindset, and a proactive approach to problem-solving. You will collaborate with cross-functional teams to protect our most critical assets and uphold trust with our customers and stakeholders
• Implement and maintain compliance with frameworks (SOC 2, NIST CSF, CIS) and regulatory requirements (NYDFS, GLBA, Safeguards, CCPA and related)
• Support internal and external security audits and exams, including evidence gathering and remediation tracking
• Build AI assisted GRC workflows for scaling GRC and security functions
• Maintain and manage security risk register, risk assessments, and remediation processes
• Manage security governance and compliance projects, and assist with other project management efforts
• Manage security metrics, KPIs and reporting
• Support customer security due diligence processes
• Review, manage, and monitor security policies for compliance
• Facilitate remediation for security and compliance issues across stakeholders
• Manage vendor security risk assessments
• Support on-call and operational security activities including security monitoring, incident management, general security reviews, security awareness and training, and other tasks

Benefits

• Compensation: You’ll receive a highly competitive compensation package with room to grow.
• Time Away: We offer a generous PTO program, sick time, and company holidays.
• Flexible Work: Remote, hybrid, or in-office. We’ve got it all and aim for you to work where it works. Where possible, we offer geographic flexibility.
• Health Benefits: Health, dental, and vision insurance are all company-sponsored to keep you healthy and strong.
• Parental Leave: Birthing and non-birthing parents receive 12 weeks of fully paid time to welcome a new child.- Experience or exposure to startup environments is a plus
• Proven experience in a security analyst related role, with a focus on security compliance, risk management, security issue management, and/or security program management
• Basic knowledge of cloud security and public cloud environments
• Strong organization and project management skills
• Self-starter that can work autonomously, be agile, and balance multiple projects and operational efforts
• Excellent communication and collaboration skills, with the ability to explain security concepts to technical and non-technical stakeholders
• Experience or exposure to financial services or tech organizations is a plus
• Experience maintaining a security risk register and issue management processes
• Experience developing, automating, and scaling security and GRC processes leveraging AI tools / agentic capabilities
• Experience with security and compliance frameworks and requirements (OWASP, SOC 2, NIST CSF / 800-53, ISO 27001/2, CIS, NYDFS, CCPA or others.)
• Bachelor’s degree in Computer Science, Information Security, Technology, or a related field
• Experience with operational activities including issue management, security reviews, control monitoring, incident management, and reporting
• Experience with security compliance frameworks and risk assessments
• Hand-on experience with AI tooling and assisted workflows
• Minimum of 5+ years as a security analyst or security program manager with relevant responsibilities and background
• Relevant security certifications based on career experience (CompTIA Security+, CC, SSCP or related), or seasoned career level (CISSP, CISM, CRISC or related)