Security Analyst - Governance, Risk, and Compliance

Role overview

Support and improve an information security governance, risk, and compliance program for a cloud based software organization. The role combines risk assessment, control operations, audit readiness, and close work with legal, product, infrastructure, and security teams. It also calls for finding practical ways to use automation and AI to strengthen compliance work.

Responsibilities

- Design and operate security controls with stakeholders across the organization. - Automate compliance tasks such as collecting evidence and checking control effectiveness. - Track program health and maturity using quantitative and qualitative measures. - Lead continuous improvement work and maintain security policies, standards, and processes. - Coordinate internal and external audits and assessments. - Partner with product and infrastructure teams on engineering work tied to compliance requirements.

Requirements

- Strong knowledge of cybersecurity, privacy, and risk management. - Information security experience in an organization with substantial compliance obligations. - Experience with cloud based SaaS environments, including AWS control environments. - Familiarity with SOC 2, ISO 27001, ISO 27701, FedRAMP, CCPA, and GDPR. - Clear written and verbal communication skills and experience delivering collaborative projects. - A proactive, relationship focused approach to governance and continuous improvement.

Nice to have

- Knowledge of software development and architecture. - CCSP, PCI QSA, CISSP, CISA, or CISM certification. - Familiarity with tools for documentation, team communication, and code collaboration.

Benefits and work setup

The role includes salary, restricted stock units, health, vision, dental, and mental health benefits. Listed US salary ranges vary by geographic zone, from $129,900 to $210,210.