Cybersecurity Assurance Analyst - Level 1

SecurityPal AI is a Cybersecurity Assurance Management Platform founded in 2020 that combines AI with certified security and GRC experts to manage a wide range of security workflows, including security questionnaires, vendor assessments, audits, compliance, and Trust Centers. The platform helps organizations accelerate trust, reduce friction, and streamline every aspect of the cybersecurity assurance lifecycle.

SecurityPal's mission is to accelerate global GDP by solving the most complex security assurance challenges at scale. Backed by Craft Ventures, we are headquartered in San Francisco and operate our "Silicon Peaks" global command center in Kathmandu, Nepal. Today, we serve a diverse range of customers, from high-growth startups to publicly traded enterprises, including industry leaders such as OpenAI, Figma, and Grammarly.

Key Responsibilities

• Directly complete and update detailed security assessment questionnaires (RFPs, RFIs, and similar), utilizing AI tools and internal knowledge bases to ensure accuracy.
• Conduct reviews of security documentation and audit artifacts to validate compliance with standard frameworks.
• Deliver completed assessments consistently within agreed SLAs, collaborating with the team to resolve complex risks or blockers.
• Help build and maintain a structured, AI-ready knowledge library of compliance frameworks and regulations based on assessment outcomes.
• Coordinate with internal subject matter experts to gather technical information needed to keep security documentation accurate and updated.
• Engage in targeted customer communications and clarify questions regarding assessments to ensure successful project delivery.
• Identify and flag gaps in processes or documentation, communicating findings clearly to relevant stakeholders.
  
  

Qualifications:

• Bachelor's degree in Computer Science, Information Security, Information Technology, or equivalent (recent graduates welcome).
• 0–1 years of experience in cybersecurity, GRC technology, or IT service delivery.
• Foundational understanding of security risk management frameworks (ISO 27001, NIST, SOC 2, GDPR, etc.) and how to apply them to assessments.
• Basic certifications, such as CompTIA Security+, or a strong desire to pursue relevant credentials.
• Demonstrated eagerness and aptitude to leverage AI tools and automation platforms to execute work efficiently.
• Strong written and verbal communication skills; comfortable collaborating with internal teams and communicating professionally with customers.
• Analytical mindset with strong attention to detail and a high level of comfort handling technical documentation.
  
  

We are an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.