Security Analyst, Governance, Risk, and Compliance

Company Overview

BE PART OF BUILDING THE FUTURE.

What do NASA and emerging space companies have in common with COVID vaccine R&D teams or with Roblox and the Metaverse? 

The answer is data, -- all fast moving, fast growing industries rely on data for a competitive edge in their industries. And the most advanced companies are realizing the full data advantage by partnering with Pure Storage. Pure’s vision is to redefine the storage experience and empower innovators by simplifying how people consume and interact with data. With 11,000 customers including 58% of the Fortune 500, we’ve only scratched the surface of our ambitions. 

Pure is blazing trails and setting records:

• For ten straight years, Gartner has named Pure a leader in the Magic Quadrant 
• Our customer-first culture and unwavering commitment to innovation have earned us a certified Net Promoter Score that is the highest in the industry
• Industry analysts and press applaud Pure’s leadership across these dimensions
• And, our 6,000 employees are emboldened to make Pure a faster, stronger, smarter company as we go

If you, like us, say “bring it on” to exciting challenges that change the world, we have endless opportunities where you can make your mark.

Position Overview

SHOULD YOU ACCEPT THIS CHALLENGE...

Are you ready to be the hero behind the scenes, tackling high-stakes security challenges like Ethan Hunt in "Mission: Impossible"? Join our dynamic Governance, Risk, and Compliance (GRC) team within Pure Security Office, where you’ll be at the forefront of safeguarding our digital assets and ensuring robust risk management practices. You will be an expert of our digital fortress, identifying and addressing risks to strike an optimal balance between business outcomes and risk mitigation. If you are passionate about risk management and understand its fundamental role in key business decisions, then this is the perfect role for you!

Overview 

We are seeking a detail-oriented Security Analyst specializing in Governance, Risk, and Compliance (GRC) with a strong focus on Risk Management. The ideal candidate will be responsible for identifying, assessing, and mitigating risks to ensure the security and compliance of our organization's information systems. This role requires a deep understanding of risk management frameworks, security policies, and compliance standards to protect our digital assets and support our business objectives.

Responsibilities

What You’ll Do

• Collaborate with cross-functional Infrastructure, Engineering, Business and Security teams to Identify potential security risks to information systems and data
• Educate, influence and work with technology and platform owners to implement necessary controls and best practices related to identified risks
• Develop and implement risk management strategies and processes
• Maintain the cybersecurity risk register
• Conduct regular risk assessments
• Process security exceptions while assessing risks
• Monitor and report on the effectiveness of risk management initiatives
• Appropriately assess risk when business and technical decisions are made, demonstrating risk management mindset

Qualifications

Requirements

General Experience

• 5 years of proven experience in a GRC or Risk Management role, in both on-prem and cloud environments in a Technology Company
• Knowledge of Security Best Practices (e.g., least privileged, zero trust model)
• Hands on working knowledge with GRC tools (e.g., ServiceNow, ZenGRC)
• Cybersecurity certifications (e.g., CISSP, CISM, CISA) are a plus

Technical Skills

• Strong knowledge of risk management frameworks (e.g., NIST, ISO 31000) and compliance standards (e.g., ISO27001, SOC-2).
• Basic to intermediate understanding of secure software development practices
• Expertise with risk identification in solution architecture and design
• Strong working knowledge of building risk reports for senior management 

Soft Skills

• Analytical Thinking: Skill in analyzing problems, identifying root causes, and providing solutions
• Project Management: Experience managing project timelines, resources, and stakeholders
• Collaboration: Ability to work well with cross-functional teams, including Engineering, IT operations, Security, and Compliance teams

Pay Range

Pay Transparency Statement

Pay Range: $130,000.00 - $196,000.00

Salary ranges are determined based on role, level and location. For positions open to candidates in multiple geographical locations, the base salary range is reflective of the labor market across the applicable locations. 

This role may be eligible for incentive pay and/or equity. 

And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events - check out purebenefits.com for more information. 

There is no application deadline and we accept applications on an ongoing basis until the job is filled.

BE YOU—CORPORATE CLONES NEED NOT APPLY

Pure is where you ask big questions, think differently, and make an impact. This is not just a job, but a place where you have a voice and can accelerate your career. We value unique thoughts and celebrate individuality, and with ample opportunity to learn, develop yourself, and expand into different roles, joining Pure is an investment in your career journey.

Through our Pure Equality program, which supports a flourishing field of employee resource groups, we nourish the personal and professional lives of our team members. And our Pure Good Foundation gives back to local and global communities through volunteering and grants.

And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events.

PURE IS COMMITTED TO EQUALITY.

Research shows that in order to apply for a job, women feel they need to meet 100% of the criteria while men usually apply after meeting about 60%. Regardless of how you identify, if you believe you can do the job and are a good match, we encourage you to apply.

Pure is proud to be an equal opportunity and affirmative action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other characteristic legally protected by the laws of the jurisdiction in which you are being considered for hire. 

If you need assistance or an accommodation due to a disability, you may contact us at TA-Ops@purestorage.com.

APPLICANT & CANDIDATE PERSONAL INFORMATION PRIVACY NOTICE.

If you're wondering how or why Pure collects or uses information you provide, we invite you to check out our Applicant & Candidate Personal Information Protection Notice.

DEEMED EXPORT LICENSE NOTICE.

Some positions may require a deemed export license for compliance with applicable laws and regulations. Please note: Pure does not currently sponsor deemed export license applications so we are unable to proceed with applicants requiring stated sponsorship.

Salary : $130,000 - $196,000