Sr. Risk and Compliance Engineer

At PitchBook, we are always looking forward. We continue to innovate, evolve, and invest in ourselves to bring out the best in everyone. We’re deeply collaborative and thrive on the excitement, energy, and fun that reverberates throughout the company. 

Our extensive learning programs and mentorship opportunities help us create a culture of curiosity that pushes us to always find new solutions and better ways of doing things. The combination of a rapidly evolving industry and our high ambitions means there’s going to be some ambiguity along the way, but we excel when we challenge ourselves. We’re willing to take risks, fail fast, and do it all over again in the pursuit of excellence.

If you have a good attitude and are willing to roll up your sleeves to get things done, PitchBook is the place for you. 

 

About the Role:

As a member of the Product and Engineering team at PitchBook, you will be part of a team of big thinkers, innovators, and problem solvers who strive to deepen the positive impact we have on our customers and our company every day. We value curiosity and the drive to find better ways of doing things. We thrive on customer empathy, which remains our focus when creating excellent customer experiences through product innovation.

We know that greatness is achieved through collaboration and diverse points of view, so we work closely with partners around the globe. As a team, we assume positive intent in each other’s words and actions, value constructive discussions, and foster a respectful working environment built on integrity, growth, and business value. We invest heavily in our people, who are eager to learn and constantly improve. Join our team and grow with us!

As a Senior Risk and Compliance Engineer and member of the Pitchbook Cybersecurity Team, you will spearhead our growing Governance, Risk, and Compliance (GRC) objectives through collaboration with PitchBook Product Engineering and, by way of our parent company, Morningstar Security. You will work with the Director of Cybersecurity to lead our first SOC 2 Type II audit and attestation and will work across PitchBook and Morningstar to support other audit efforts focused on cybersecurity and Governance, Risk, and Compliance. Through your work, you will communicate security and risk postures to the business with a focus on safeguarding our solutions for the customer.

This role will be key to developing and overseeing Governance, Risk, and Compliance practices at PitchBook and requires strong knowledge and expertise. In this role, you will be provided with opportunities to learn, grow, and develop your career while being supported by a growing cybersecurity team and leadership that understands the need to align security practices with customer satisfaction and profitability.

 

Primary Job Responsibilities:

• Stay current with security industry risks and risk management frameworks by applying this understanding to PitchBook governance, risk, and compliance practices 
• Provide expert advice to PitchBook Engineering teams to drive strong risk awareness and best practices throughout our Software Development Life Cycle 
• Collaborate and partner with the PitchBook and Morningstar Engineering and Security teams to ensure successful completion of annual risk assessments and security audits 
• Develop and deliver our annual SOC 2 Type II attestation with support from leadership
• Apply the company value “Customers are King” through your daily work 
• Support the vision and values of the company through role modeling and encouraging desired behaviors 
• Participate in various company initiatives and projects as requested 

 

Skills and Qualifications:

• Bachelor's degree program or equivalent degree in a field such as Information Security, Risk Management, or Information Technology
• 5+ years of experience in Risk Management, Information Security, or a similar field
• Experience conducting security audits and risk assessments, working with large sets of data to derive clear understanding of threats, risks, and business posture
• Collaborative written and verbal communication skills with the ability to effectively read the situation and adjust your communication style to the audience
• Strong understanding of the System and Organization Controls (SOC 2) standard with hands-on experience

 

Benefits + Compensation at PitchBook:

Physical Health