About the Role

Security at Mixpanel is not a “check-the-box” exercise. Our growing team is dedicated to understanding and managing security risks while enabling our engineering and product design partners to continue making world-class software. The team is looking for a security and privacy leader to partner with its world-class product and engineering teams.

Together with the current security team, not only will you drive enterprise security initiatives, but also be an advocate for security and privacy at Mixpanel.

Mixpanel is seeking a dynamic Governance, Risk and Compliance Analyst  to support our Information Security and Information Technology teams that will help ensure that we accomplish our GRC objectives.

Responsibilities

• Lead security assessments and audits and monitor and manage compliance of implemented enterprise information security controls
• Respond to customer security inquiries. Serve as a company representative with prospects, customers, and partners by assisting with completing security questionnaires, assessments and audits
• Lead periodic internal risk assessments based on changes to business, technology or threat landscape
• Evaluate and manage third-party risk and work with vendors to remediate identified risks
• Ensure that company policies are up to date, recorded, tracked and disseminated to the entire company
• Coordinate periodic disaster recovery / business continuity testing and training
• Build content for employee security awareness and conduct new hire and on-going training
• Develop, maintain and report against security control KPIs

We’re Looking For Someone Who Has

• 3+ years of experience in a Governance, Risk and Compliance role, preferably in the technology industry.
• Familiarity with compliance and risk management frameworks, such as SOC 2, ISO 27001, ISO 27701, SOX, HITRUST, etc.
• Strong bias for action; ability to juggle multiple priorities and create a sense of urgency in a fast-paced, dynamic environment.
• Strong understanding of Business Continuity and Disaster Recovery principles
• Excellent communication and analytical skills
• Strong understanding of cloud security principles is a plus
• Industry standard certification such as CISA, CISM or other related certification is a plus
• Experience with GRC tools such as ZenGRC, Vanta, etc. is a plus
• Project management experience is a plus
• Experience with third-party risk management tools such as Panorays or Bit Sight is a plus