Senior Security Analyst

Who we are The problem: Every minute matters in fire response. As climate change amplifies the intensity of wildfires—with longer fire seasons, dryer fuels, and faster winds—new ignitions spread faster and put more communities at risk. Today, most wildfires are detected by bystanders and reported via 911, meaning it can take hours to detect a fire, verify its exact location and size, and dispatch first responders. Fire authorities need a faster way to detect, confirm, and pinpoint fires so that they can quickly respond—preventing small flare-ups from becoming devastating infernos. About Pano: We are a 100+ person growth-stage hybrid-remote start-up, headquartered in San Francisco. We are the leader in early wildfire detection and intelligence, helping fire professionals respond to fires faster and more safely—with the right equipment, timely information, and enhanced coordination—so that they can stop a new ignition before it grows. Pano AI combines advanced hardware, software, and artificial intelligence into an easy-to-use, web-based platform. Leveraging a network of ultra-high-definition, 360-degree cameras atop high vantage points, as well as satellite and other data feeds, Pano AI produces a real-time picture of threats in a geographic region and delivers immediate, actionable intelligence. Pano AI is on TIME 's list of the 100 Most Influential Companies of 2025! MIT Technology Review listed Pano as one of the top 15 climate tech companies to watch in 2024, and Fast Company named Pano AI one of the Top 10 most innovative companies in AI of 2023 . We’ve also been featured in the Wall Street Journal , Bloomberg , and CNBC News . Pano AI ’s dozens of government and enterprise customers span 16 states in the U.S., five states in Australia, and BC, Canada, and we are currently monitoring over 30 million acres of land. Pano AI has raised $89M in venture capital funding from Giant Ventures, Liberty Mutual Ventures, Tokio Marine Future Fund, Congruent Ventures, Initialized Capital, Salesforce Ventures, and T-Mobile Ventures. Learn more at . The Role We are seeking a Senior Security Analyst to strengthen our information security and compliance posture as we scale. This role will help design, implement, and monitor security controls, ensuring alignment with regulatory and customer requirements such as SOC 2 and ISO 27001. You will partner cross-functionally with IT, Legal, and Engineering to maintain compliance, mitigate risk, and foster a culture of security throughout the organization. The ideal candidate is highly collaborative, detail-oriented, and passionate about improving security in a practical, business-aware way. What you'll do Support the design, implementation, and ongoing operation of the company’s information security program, aligned with SOC 2, ISO 27001, and other frameworks as applicable Operate and maintain GRC tools (Vanta) to track controls, automate evidence collection, and support audits Coordinate and respond to customer security questionnaires and due diligence requests in a timely, accurate manner Maintain and update the company’s Trust Center and other externally-facing security and compliance materials Conduct and document risk assessments, control testing, and evidence collection to support audits and internal reviews Monitor security tools and dashboards for alerts and suspicious activity; escalate and assist in investigations as needed Help draft, maintain, and enforce security policies, standards, and procedures Perform vendor risk assessments and track remediation activities with third parties Collaborate with IT to improve endpoint, cloud, and identity security controls Conduct periodic access reviews and support IAM governance Assist with security awareness training campaigns and phishing simulations Contribute to security incident response plans and participate in tabletop exercises Drive continuous improvement of security and compliance processes What you'll bring 4–7 years of experience in information security, risk, or compliance roles, with exposure to security operations and/or GRC Strong working knowledge of security principles, risk management, and compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF) Hands-on experience with GRC tools (Vanta or similar) to support audits, evidence collection, and control tracking Experience responding to customer security questionnaires and maintaining public-facing security materials (e.g., Trust Center) Experience supporting external audits and maintaining evidence repositories Familiarity with cloud environments (e.g., AWS, GCP) and SaaS security considerations Understanding of identity and access management (IAM) principles and best practices Excellent organizational and documentation skills, with strong attention to detail Strong written and verbal communication skills, able to convey security concepts to non-technical stakeholders Experience with third-party risk management and vendor assessments Proven ability to work effectively across teams in a collaborative, fast-paced environment Hands-on experience with security tools such as SIEM, CSPM, EDR, and vulnerability scanners Pano is an equal opportunity employer committed to recruiting and supporting our team-members regardless of where they come from. We do not discriminate on the basis of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Originally posted on Himalayas