[Hiring] Senior Security Analyst @Valon Tech

Role Description

We are seeking a motivated Sr. Security Analyst to join our growing team! As a key security member working closely with the Head of Security GRC and the Security team at Valon, you will play a critical role in ensuring the security of our organization's systems, cloud infrastructure, products, and data.

This position requires:

• A strong foundation in security risk and compliance principles
• Hands-on experience leveraging AI-assisted processes to strengthen GRC functions and operational activities
• An automation-first mindset
• A proactive approach to problem-solving

You will collaborate with cross-functional teams to protect our most critical assets and uphold trust with our customers and stakeholders.

Responsibilities

• Implement and maintain compliance with frameworks (SOC 2, NIST CSF, CIS) and regulatory requirements (NYDFS, GLBA, Safeguards, CCPA and related)
• Support internal and external security audits and exams, including evidence gathering and remediation tracking
• Build AI-assisted GRC workflows for scaling GRC and security functions
• Maintain and manage security risk register, risk assessments, and remediation processes
• Manage security governance and compliance projects, and assist with other project management efforts
• Manage security metrics, KPIs, and reporting
• Support customer security due diligence processes
• Review, manage, and monitor security policies for compliance
• Facilitate remediation for security and compliance issues across stakeholders
• Manage vendor security risk assessments
• Support on-call and operational security activities including security monitoring, incident management, general security reviews, security awareness and training, and other tasks

Qualifications

• Proven experience in a security analyst related role, with a focus on security compliance, risk management, security issue management, and/or security program management
• Experience with security and compliance frameworks and requirements (OWASP, SOC 2, NIST CSF / 800-53, ISO 27001/2, CIS, NYDFS, CCPA or others)
• Basic knowledge of cloud security and public cloud environments
• Self-starter that can work autonomously, be agile, and balance multiple projects and operational efforts
• Excellent communication and collaboration skills, with the ability to explain security concepts to technical and non-technical stakeholders
• Experience developing, automating, and scaling security and GRC processes leveraging AI tools / agentic capabilities
• Experience maintaining a security risk register and issue management processes
• Strong organization and project management skills
• Experience or exposure to startup environments is a plus
• Experience or exposure to financial services or tech organizations is a plus

Requirements

• Minimum of 5+ years as a security analyst or security program manager with relevant responsibilities and background
• Bachelor's degree in Computer Science, Information Security, Technology, or a related field
• Relevant security certifications based on career experience (CompTIA Security+, CC, SSCP or related), or seasoned career level (CISSP, CISM, CRISC or related)
• Experience with security compliance frameworks and risk assessments
• Experience with operational activities including issue management, security reviews, control monitoring, incident management, and reporting
• Hands-on experience with AI tooling and assisted workflows

Benefits

• Base Compensation Band: $115K - 145K
• Base salary offered is determined by a number of factors including the candidate’s experience, qualifications, and skills
• This Base Compensation pay range applies to our New York City located staff and may differ according to location
• Compensation: Competitive salary with a meaningful stake in the company via equity, and 401k plan
• Health & well-being: Comprehensive medical, dental, & vision benefits
• Commuter benefits: Pre-tax deductions for public transportation, rideshare services, and parking expenses
• Grow together: Company-wide orientation and learning & development opportunities
• Play together: Quarterly budgets for team and company outings
• Generous time off: Flexible paid time off, sick days, and 11 company holidays
• Baby bonding time: 12 weeks off for both birthing and non-birthing parents - fully paid