Security Analyst

About the Role

Discord hosts a highly active community of millions who primarily engage on the platform through gaming. As a pivotal part of the gaming ecosystem, Discord aims to enhance the experience of socializing before, during, and after gaming sessions. The Legal team is expanding its Security Governance, Risk, and Compliance (GRC) function and is seeking a Security Analyst to manage and scale this program. The role involves direct, hands-on responsibilities combined with developing systems to automate compliance controls, partnering closely with Security, Engineering, IT, and Legal teams to provide smooth and minimally disruptive compliance processes.

Key Responsibilities

• Manage the entire customer security questionnaire process from start to finish, creating and expanding a library of reusable answers to streamline repeated queries.
• Handle risk and control workflows, including triaging risks, monitoring gap closure, and maintaining an accurate risk register. Acting as the primary contact for partner teams to resolve standard inquiries and escalate complex issues.
• Conduct thorough GRC analyses to align standards, policies, and controls, identify gaps, and evaluate control maturity and effectiveness.
• Maintain and improve the GRC tool ecosystem, including the administration of platforms, ticketing systems, and knowledge repositories. Design automation workflows to reduce manual control verification.
• Create clear and concise documentation such as internal guidance, updates to policies and procedures, company-wide communications, and easy-to-understand security training materials for non-experts.

Candidate Qualifications

• Minimum of 4 years experience in security compliance, GRC, or related areas such as security operations, IT risk, or audit.
• Good working knowledge of industry frameworks such as ISO 27001/27002, SOC 2, PCI DSS, GDPR/CPRA, with practical insight into their implementation as controls.
• Direct experience with compliance processes including evidence gathering, control tracking, risk register maintenance, or security questionnaire management.
• Strong preference for automation, utilizing tools, integrations, and workflows to replace tedious manual tasks, aiming beyond mere checkbox compliance.
• Proficiency in managing diverse tools (GRC platforms, ticketing, documentations) with an emphasis on data cleanliness and organization.
• Exceptional written communication skills capable of translating complex compliance requirements into practical guidance.
• Ability to collaborate cross-functionally and influence stakeholders without formal authority in a dynamic environment with competing priorities.

Preferred Qualifications

• Hands-on knowledge of GRC platforms.
• Experience with ISO 27701, ISO 42001, or involvement in emerging AI compliance initiatives.
• Background in consumer technology, gaming, or online community platforms.

Additional Information

Applicants must currently reside in or be willing to relocate to the San Francisco Bay Area counties: Alameda, Contra Costa, Marin, Napa, San Francisco, San Mateo, Santa Clara, Solano, and Sonoma. Relocation assistance may be offered. The position is hybrid with an expectation of at least two office days per week.

Compensation: The US base salary ranges from $144,000 to $162,000 annually, accompanied by equity and benefits. Actual pay within the range is influenced by skills, experience, and education. The stated salary excludes equity and benefits.

About Discord

Discord is a multiplatform, multigenerational multiplayer platform fostering deep connections around shared gaming interests. The platform supports relationships and business growth within the gaming community, aiming to create enjoyable moments with friends in varied gaming contexts.

Diversity and Inclusion

Discord is dedicated to inclusive hiring practices and provides reasonable accommodations during the recruitment process to ensure candidates are set up for success. Candidates are encouraged to communicate their accommodation needs.