Compliance Analyst

Harvey, Inc.; San Francisco (CA); Hybrid; USD 99,000 - 181,000; Full time

Job summary

Harvey, Inc. is seeking an experienced information security compliance professional to own and maintain core compliance documentation and security assessment reports.

You will coordinate evidence collection across Engineering, Infrastructure, and Security for regulated assessments and support third‑party assessor engagements end‑to‑end. This role requires mapping controls to technical implementations, evaluating evidence quality, and maintaining remediation tracking with a focus on continuous

Qualifications

• 3–5+ years of information security compliance experience
• Experience with government and industry frameworks in SaaS/cloud environments
• Ability to map controls to technical implementations and evaluate evidence quality
• Experience maintaining compliance documentation and remediation tracking
• Ability to communicate compliance requirements to engineering teams

Responsibilities

• Own and maintain core compliance documentation and security assessment reports
• Coordinate evidence collection for regulated assessments across teams
• Support third‑party assessor engagements from scheduling to remediation responses
• Conduct gap analyses against applicable frameworks and produce remediation artifacts
• Manage continuous monitoring activities including control reviews and incident documentation
• Collaborate with Engineering and Security to validate control implementations and translate regulatory language into testable configurations

Skills

Information security

Regulatory frameworks

Documentation

Cross-functional collaboration

Education

Degrees in information security or related field

Tools

Compliance automation tooling

Job description

At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come.

This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched.

Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you.

At Harvey, the future of professional services is being written today — and we’re just getting started.

Role Overview

Some of the world's largest companies and their law firms use Harvey's AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex challenges in less time.

Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else.

In this role, you'll report to the Senior Compliance Manager and serve as a core executor on Harvey's certification and audit portfolio. You will be responsible for the hands‑on compliance work that keeps our compliance programs healthy, maintaining control documentation, coordinating evidence collection, supporting third‑party assessments, and working closely with Engineering and Security teams to ensure controls are implemented, tested, and continuously monitored. This is a role for a detail‑oriented practitioner who takes pride in getting the compliance fundamentals exactly right.

What You'll Do

Own and maintain core compliance documentation — including compliance packages and security assessment reports — keeping them accurate and audit‑ready

Coordinate evidence collection across Engineering, Infrastructure, and Security for regulated assessments

Support third‑party assessor engagements end‑to‑end: scheduling, preparing teams, triaging findings, and drafting responses

Conduct gap analyses against applicable frameworks and produce remediation tracking artifacts teams can act on directly

Manage continuous monitoring activities including control reviews, change notifications, and incident documentation to maintain compliance status

Partner with Engineering and Security to validate control implementations and translate regulatory language into testable technical configurations

What You Have

3–5+ years in information security compliance with hands‑on exposure to government and industry frameworks in a SaaS or cloud environment

Solid working knowledge of applicable government compliance frameworks; ability to map controls to technical implementations and evaluate evidence quality

Experience maintaining compliance documentation and tracking remediation activities; familiarity with compliance automation tooling

Exceptional attention to detail — able to manage multiple concurrent workstreams and keep documentation aligned with a dynamic cloud environment

Clear communicator: able to write crisp control implementation statements and explain compliance requirements to engineering audiences

Compensation

$99,200 - $181,300

Depending on your location, an Applicant Privacy Notice may apply to you. You can find all of our Applicant Privacy Notices [ here ].

Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing [e-mail]