Latest AI JobsBrowse Jobs
XBOW logo

Information Security Analyst, GRC

XBOWEurope (Remote)IT & Corporate Security
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
11 Sept 2026
Status
Open · checked 7d ago

About this role

Role Overview

XBOW Autonomous Offensive Security Platform is seeking an experienced Information Security Analyst, GRC to join their team on a remote basis in Europe. This full-time position suits a detail-oriented professional with a strong background in risk, compliance, and security assurance who wants to help scale trust functions within an innovative AI-powered cybersecurity startup.

Key Responsibilities

Complete technical security questionnaires, risk assessments, and due-diligence requests for customers and prospects.
Collaborate with Sales and Customer teams to articulate security controls, system architecture, and overall compliance posture.
Conduct third-party and vendor security risk assessments, reviewing various SaaS providers and service partners.
Address and resolve compliance alerts using the Vanta platform to maintain adherence to internal standards.
Develop, maintain, and enhance risk assessment frameworks, methodologies, and comprehensive documentation.
Collaborate with internal stakeholders to track and remediate identified risks.
Contribute directly to compliance initiatives mapped to frameworks including SOC 2, FedRAMP 20x, ISO 27001, and ISO 42001.
Maintain accurate risk registers, corporate policies, and supporting compliance evidence.
Coordinate risk management processes and streamline compliance workflows as the business expands.

Requirements

Bring at least 7 years of professional experience working in risk, compliance, security assurance, or adjacent disciplines.
Possess background experience in hands-on technical environments such as IT, Engineering, or operational security.
Demonstrate practical experience in completing or reviewing technical security questionnaires and client risk assessments.
Familiarity with leading security compliance and data protection frameworks like SOC 2, ISO 27001, NIST, GDPR, and HIPAA.
Proven ability to perform vendor and third-party risk assessments.
Exceptional written communication skills to simplify and explain complex security concepts clearly.
High organizational capability, meticulous attention to detail, and a pragmatic approach to risk management.
Ability to thrive autonomously in a fast-paced, remote-first startup culture.
Familiarity with leveraging modern AI tooling for productivity enhancement while actively managing associated risks.

Nice to Have

Prior work history within a SaaS organization or a security-focused company.
Experience handling GDPR Subject Access Requests.
Relevant security or risk certifications such as CISSP or CRISC.
Practical knowledge regarding cloud security best practices.

Skills and Tools

Risk assessment frameworks and methodologies
Compliance frameworks (SOC 2, ISO 27001, ISO 42001, FedRAMP 20x, NIST, HIPAA, GDPR)
Vendor and third-party risk management
Vanta compliance product
Modern AI productivity tooling
Written communication and documentation

Salary and Benefits

Competitive salary paired with meaningful stock options.
Opportunities to learn from and collaborate alongside leading security and AI experts.
Chance to drive high-impact work on complex technical challenges.
Remote-first working arrangement with regular opportunities for in-person team collaboration.

About the Company

XBOW is redefining the cybersecurity industry by building the world's first autonomous pentester powered by artificial intelligence. Backed by Sequoia Capital and founded by creators of GitHub Copilot and GitHub Advanced Security, the company develops transformative AI-driven tools to defeat malicious actors, responsibly discover vulnerabilities, and secure the software development lifecycle.

How to Apply

Interested candidates should visit the official XBOW careers page to submit their application and start the hiring process.

Questions candidates ask

Is this position fully remote?

Yes, this is a remote role based in Europe, though team members meet regularly for in-person collaboration.

What level of experience is required for this role?

Candidates must have 7+ years of experience in risk, compliance, security assurance, or related fields, alongside hands-on technical experience in areas like IT or Engineering.

What compliance frameworks will I be working with?

You will contribute to compliance initiatives aligned with frameworks such as SOC 2, FedRAMP 20x, ISO 27001, ISO 42001, NIST, GDPR, and HIPAA.

What tools and platforms will I use on the job?

You will use the Vanta product to investigate and resolve compliance alerts, alongside maintaining risk registers and leveraging modern AI tooling.

What is the interview process like?

The hiring process includes a talent introduction, a GRC and security knowledge interview, a hiring manager interview, and a final interview with a leadership team member.

Ready to apply?

The application is on the official XBOW careers page.

Apply on company site