Security Analyst

Join Discord as a Security Analyst to enhance compliance and security processes in a fast-paced environment focused on gaming and community engagement. Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games.

• •Run the customer security questionnaire program end-to-end, from intake through response, and grow a reusable answer library that turns repeat questions into fast, near-self-service answers.
• •Operate risk and control workflows: triage incoming risks, track gap closure and risk treatment through to completion, and keep the risk register accurate and current.
• •You'll be the first point of contact for partner teams, resolving routine questions and escalating the ones that need senior judgment.
• •Run GRC analyses that turn into decisions: how standards, procedures, and controls align to our policies and framework requirements; where the gaps are; and how mature and effective our controls actually are.
• •Build and maintain the GRC toolchain and its automation: administer our GRC platform, ticketing, and knowledge bases, and design the integrations and workflows that collect evidence and check controls by default rather than by hand.
• •Create the documentation that makes the program usable: internal guidance and updates to our policies, standards, and procedures; company-wide GRC communications; and security training delivered in plain language that people outside the field can follow.

• •Relocation assistance may be available.
• •For this role, the Hiring Manager would like folks to be in the office 2 days a week.
• •The US base salary range for this full-time position is $144,000 to $162,000 + equity + benefits.
• •Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training.

• •4+ years in security compliance, GRC, or a closely related field (security operations, IT risk, audit).
• •Working familiarity with common frameworks (ISO 27001/27002, SOC 2, PCI DSS, GDPR/CPRA) and a sense of how their requirements turn into day-to-day controls.
• •Hands-on experience operating compliance processes: evidence collection, control tracking, risk register upkeep, or security questionnaire response.
• •An automation-first instinct. You reach for tooling, integrations, and repeatable workflows to replace manual, repetitive compliance work, not box-checking.
• •Comfort living across tools (GRC platforms, ticketing, docs and wikis) and a habit of keeping data clean and organized.
• •Clear writing, with a knack for turning dense requirements into guidance people actually use.
• •Ability to work across teams and influence without authority in a fast-moving environment with competing priorities.