PLEASE NOTE: This is a temporary contractor assignment managed by Magnit. 

Millions of people across the world come to Pinterest to find new ideas every day. It’s where they get inspiration, dream about new possibilities and plan for what matters most. Our mission is to help those people find their inspiration and create a life they love. In this role, you'll work on projects that support this mission and help move Pinterest forward.
 

Security Automation Engineer, GRC & Vendor Risk

About the role
We're looking for an engineer to partner with the Security team to automate governance, risk, and compliance (GRC) workflows and build tooling for vendor security assessments. You'll turn manual, ticket-driven processes into scalable systems that reduce toil for security analysts and speed up vendor onboarding.

What you'll do

• Automate GRC workflows: control testing, evidence collection, audit prep, policy exception tracking, and risk register updates
• Build and maintain vendor security review tooling — automating questionnaire distribution, response triage, risk scoring, and remediation tracking
• Integrate GRC and vendor risk platforms (e.g., Jira, ServiceNow, Vanta/Drata, OneTrust, or similar) with internal systems via APIs and scripts
• Design workflows that route approvals, escalations, and notifications automatically based on risk tier or SLA
• Build dashboards and reporting to give security leadership visibility into control coverage, vendor risk posture, and audit readiness
• Work directly with security analysts, GRC leads, and procurement to understand pain points and prioritize automation opportunities
• Maintain documentation and ensure automated workflows meet audit and compliance standards (SOC 2, ISO 27001, etc.)

What we're looking for

• 3-5 Years of Experience
• Experience building automation/integrations (Python, JavaScript, or similar) against REST APIs/MCP servers
• Familiarity with GRC or vendor risk management platforms and ticketing systems (Jira, ServiceNow)
• Experience with workflow/orchestration tools (e.g. custom scripting, or low-code platforms)
• Strong cross-functional communication — able to translate requirements into technical solutions
• Experience with LLM-based automation for document review or questionnaire analysis

Benefits Offered: Medical, Dental, Vision, 401K

Magnit Global (the operator of this Talent Community) is a global leader of contingent talent services. Our success and our clients’ success are built on a foundation of service excellence. This post is for a contract assignment. Assignment duties and duration are subject to business needs and requirements. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other legally protected characteristics.

California Notice. Qualified applicants with arrest or conviction records will be considered for employment in accordance with law, including the Los Angeles County Fair Chance Ordinance, the San Francisco Fair Chance Ordinance, and the California Fair Chance Act. Criminal history may have a direct, adverse, and negative relationship with the following job duties: protect and return property, adhere to confidentiality requirements, comply with security requirements, adhere to policies and codes of conduct. We may use artificial intelligence tools to help our recruiters screen and assess talent. These tools do not replace human decision-making in the hiring process.