Pinterest's Security team is seeking a Security Engineer focused on Security Governance, Risk, and Compliance. This role involves collaborating with various stakeholders to enhance security governance and assurance programs. The ideal candidate will be detail-oriented and motivated to build scalable security processes. Key activities include managing risk assessments, policy governance, and supporting audit processes.

• 4+ years of experience in security governance, risk, compliance, audit, or security assurance roles.
• Working knowledge of core security and compliance frameworks such as SOC 2, CIS Controls, ISO 27001, or NIST CSF.
• Experience supporting audits, assessments, or control testing programs in a technology or SaaS environment.
• Ability to write clear, practical, and actionable security policies and standards.
• Strong organizational skills with the ability to manage multiple workstreams and deadlines.

• Administer and maintain the security risk register, tracking identified risks and remediation activities.
• Partner with stakeholders to identify, document, assess, and monitor security risks.
• Draft, review, update, and manage the lifecycle of security policies and standards.
• Support the planning and coordination of Pinterest’s annual SOC 2 Type 2 audit.
• Track and report on security awareness training metrics and follow-up actions.