GRC Specialist

Mixpanel's Information Security & Risk Management (ISRM) team is hiring a GRC Specialist to own the day-to-day operations of our GRC function. You'll be the first line of response for customer security requests and third-party risk work, keeping our pipeline moving so senior analysts can focus on risk judgment. This is a growth role with a defined path to GRC Analyst. Relevance is based on skills and concepts, not a guarantee that you qualify. Coming-soon courses matched to this posting: outline, waitlist, and skill path. 1. Building and Maintaining Asset InventoriesEstablish the foundation for vulnerability management by discovering, classifying, and tracking every software component, device, and workload in your environment. 2. Aggregating Vulnerability Findings from Multiple SourcesCollect and normalize vulnerability data from scanners, vendor advisories, SBOMs, penetration tests, and threat intelligence feeds. Move beyond CVSS scores to rank flaws by exploit activity, asset criticality, compensating controls, and remediation complexity. 4. Orchestrating Remediation Across Endpoints and CloudDeploy patches, configuration changes, and workarounds safely using automation, staged rollouts, and rollback plans. 5. Verifying Remediation and Measuring EffectivenessProve that patches took effect by checking process restarts, service versions, and residual risk, then track metrics that matter. 6. Integrating Vulnerability Management into DevOps and CI/CDShift vulnerability detection left by scanning code, dependencies, and container images before they reach production. 7. Building a Mature Vulnerability Management ProgramEstablish governance, continuous improvement, and cross-team collaboration to sustain long-term risk reduction. Other verified postings in the same role family or with overlapping skills.