Security Analyst (GRC)

TL;DR

Security Analyst (GRC): Running and scaling the Security GRC function to manage compliance, risk tracking, and security questionnaires with an accent on automation and friction-free integration across teams. Focus on building a reusable answer library, automating control checks, and maintaining the GRC toolchain.

Location: Must reside in or be willing to relocate to the San Francisco Bay Area (Hybrid: 2 days a week in office)

Salary: $144,000 – $162,000 + equity

Company

Discord is a multiplatform communication service focused on making it easier and more fun for people to hang out before, during, and after playing games.

What you will do

• Run the customer security questionnaire program end-to-end and develop a reusable answer library for fast responses.
• Operate risk and control workflows, triage incoming risks, and maintain an accurate risk register.
• Conduct GRC analyses to ensure standards and procedures align with policies and framework requirements.
• Build and maintain the GRC toolchain, implementing automations to collect evidence and check controls by default.
• Create internal guidance, update policies, and deliver security training in plain language.

Requirements

• 4+ years of experience in security compliance, GRC, security operations, or IT risk.
• Working familiarity with frameworks such as ISO 27001/27002, SOC 2, PCI DSS, and GDPR/CPRA.
• Hands-on experience with evidence collection, control tracking, and risk register upkeep.
• Automation-first mindset with a preference for tooling and repeatable workflows over manual processes.
• Strong writing skills to turn dense technical requirements into usable guidance.
• Must be based in or be able to relocate to the San Francisco Bay Area.

Nice to have

• Hands-on experience with a GRC platform.
• Exposure to ISO 27701, ISO 42001, or emerging AI compliance work.
• Background in consumer technology, gaming, or online community platforms.

Culture & Benefits

• Competitive base salary plus equity and benefits.
• Hybrid work arrangement with 2 days per week in the office.
• Relocation assistance may be available for qualified candidates.
• Commitment to inclusion and providing reasonable accommodations during the interview process.