About the Role:

As a Senior Risk and Compliance Analyst at Mytra, you will join the Security team during a critical period of growth, customer expansion, and security program maturation. Our team is building the operational foundation for scalable security governance, SOC 2 and ISO 27001 readiness, customer trust, vendor risk management, and transparent execution across company-wide security initiatives.

The ideal candidate is developing professional expertise in risk and compliance, can apply company policies and defined procedures to a variety of security and compliance issues, and can manage moderate-scope work with judgment, organization, and clear escalation. You will work closely with internal stakeholders, external auditors, vendors, customers, and the Security Committee to keep security work moving, organized, and visible.

What you’ll do:

Serve as the primary operational liaison between Mytra and external security certification auditors for SOC 2 and ISO 27001, helping coordinate requests, timelines, evidence packages, and follow-ups
Own audit evidence collection workflows, including gathering evidence from internal teams, checking evidence quality, organizing materials, tracking status, and delivering complete packages to auditors
Manage Security Committee operations, including pre-read material distribution, real-time meeting notes, committee organization tooling, recurring security activity tracking, and follow-through on personal and distributed tasks
Serve as co-admin / co-owner of Mytra’s Vanta GRC platform, helping maintain system organization, evidence workflows, control mappings, user access coordination, and audit readiness activities
Maintain transparency across security-related work by communicating tasks, risks, status, decisions, and updates to the Security team, Security Committee, and broader company audiences as appropriate
Track major security initiatives and help ensure they remain on schedule by maintaining clear workback plans, surfacing blockers early, and coordinating with owners across functions
Perform third-party security reviews for prospective vendor partners, including intake, questionnaire review, evidence assessment, risk documentation, and recommendation preparation
Support customer security reviews for prospective and existing customers by coordinating responses, collecting accurate information, managing review artifacts, and helping ensure timely completion
Manage recurring security policy updates so policies remain current, accurate, and aligned with company standards, security commitments, and evolving compliance needs
Interview Mytra staff to understand real operating procedures, document pertinent processes, and integrate those procedures into the security policy and procedure stack
Research potential new security tooling, compare options across multiple vendors, and provide clear summaries of tradeoffs, costs, risks, implementation considerations, and recommendations
Schedule and coordinate security-related meetings with internal and external stakeholders, ensuring the right people, materials, context, and follow-ups are in place

Ideal Candidates:

Have experience in security, compliance, risk management, GRC, audit readiness, vendor risk, customer security reviews, or a related operational role
Understand the basics of SOC 2, ISO 27001, security policies, audit evidence, control ownership, and compliance documentation, with a desire to deepen expertise over time
Are highly organized and can manage multiple recurring activities, deadlines, requests, meetings, and follow-ups without losing details
Communicate clearly and proactively with internal teams, external auditors, vendors, and customers, translating security and compliance needs into practical next steps
Exercise sound judgment within defined procedures and know when to escalate ambiguity, risk, blockers, or decisions that require security leadership input
Build productive working relationships across functions and are comfortable interviewing staff, asking precise questions, and turning operational knowledge into clear written procedures
Are detail-oriented and quality-minded, especially when reviewing evidence, updating policies, preparing auditor materials, or responding to customer and vendor security requests
Are comfortable operating in a fast-paced startup environment where processes are evolving and strong documentation, ownership, and follow-through matter
Have strong written communication skills and can produce clear, structured documentation for policies, procedures, meeting notes, task trackers, review summaries, and decision records
Demonstrate a collaborative, team-first mindset with the confidence to ask questions, raise concerns early, and help create visibility across the security program

Nice to have:

Experience supporting SOC 2, ISO 27001, or similar security certification programs
Familiarity with GRC tools, ticketing systems, knowledge bases, vendor review platforms, or audit evidence management workflows
Experience coordinating committees, governance forums, recurring compliance activities, or cross-functional operating cadences
Prior exposure to customer security questionnaires, vendor due diligence, risk registers, control testing, or policy lifecycle management
Experience researching and comparing security tools across multiple vendors and presenting practical recommendations to technical and non-technical stakeholders
Interest in robotics, industrial automation, hardware/software systems, supply chain technology, or security for complex electro-mechanical systems

A Final Note:

If this role excites you, we encourage you to apply — even if you don’t check every box. At Mytra, we build bots, but we hire humans. We value thoughtful challengers who communicate with clarity and respect, and we’re lifelong learners committed to getting better every day. We move fast, learn faster, and show up for each other under pressure. The best outcomes come from diverse perspectives working together to build something meaningful and built to last.

Benefits Include:

Competitive compensation and equity grants at a high-growth company backed by top-tier VCs
Fully subsidized health coverage, including medical (baseline plans), dental, and vision for employees and dependents
401(k) plans and employer-subsidized life insurance
Fully subsidized lunch and snacks at HQ—we eat and share stories together at the “long” table
Generous PTO and company-paid holidays, including one week over the winter break so everyone can recharge together
Voluntary pet insurance, Voluntary Life Insurance, Accident, Critical Illness, and Hospital Indemnity
Fully subsidized tax advisory services and education to help you understand your equity
Commuter benefits, including a up to $150 monthly commuter benefit
Lively, modern combined office and lab space where we rapidly iterate through design, build, and test phases
Fully equipped onsite gym and showers at headquarters

Pay Notice:

Compensation for this position will be set based on the candidate's experience level and location. The posted salary band is applicable only to the San Francisco Bay Area and is subject to change.

This role requires on-site presence at our Brisbane, CA headquarters, for close collaboration with the other teams.