Hands-on Security Compliance Lead for a Growing Startup

Harbinger; United States; On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Comprehensive Health, Dental & Vision

Early-stage Stock Options

Retirement Savings (401k, HSA, FSA)

Paid Time Off & Parental Leave

Annual Vacation Bonus

Wellness & Fertility Benefits

Cell Phone Stipend

Complimentary Meals & Stocked Kitchens

Job summary

Harbinger is seeking a Security Compliance Analyst to build and own our security program end-to-end in a fast-growing EV manufacturing environment. This hands-on role requires translating control requirements into concrete changes and preparing for external audits so we stay audit-ready.

You will own the control catalog, manage evidence, policies, and the Vanta-based tooling, collaborating with teams across the company to embed compliance into daily operations.

Qualifications

• Bachelor's degree in Information Systems, Cybersecurity, or related field (or equivalent experience).
• 5+ years in security compliance, GRC, or IT audit, including at least one framework taken from gap assessment through an external audit report or certification.
• Experience in a startup or high-growth environment building a program rather than maintained one.
• Security certifications (e.g. CISA, CRISC, CompTIA Security+, ISO 27001 Lead Auditor) are a plus.

Responsibilities

• Own the control catalog: implementation status, testing, evidence requirements, and crosswalks where frameworks overlap.
• Translate control requirements into specific, actionable changes for teams to implement, then verify they landed.
• Maintain the corrective action plan; open findings with named owners, real dates, and a defined evidence bar for closure partnering with program management on execution.
• Run evidence collection on a standing cadence, building automations so evidence becomes a byproduct of normal operations rather than a quarterly scramble.
• Prepare for and support external audits and certification assessments: readiness reviews, sample pulls, auditor walkthroughs, and remediation of findings.
• Define and document our system boundary and scope decisions: what's in, what's deliberately out, and reasoning that holds up under an assessor's questions.
• Write and maintain the policy and procedure set. Short enough that engineers read it, specific enough that an auditor accepts it.
• Administer our GRC platform Vanta, including control mappings, integrations, framework crosswalks, and evidence freshness
• Support role-based security awareness training and data handling guidance
• Run vendor and third‑party security reviews, including cloud services and the security requirements we flow down to suppliers.
• Document control decisions, scope rationale, and audit outcomes in Jira or Confluence so the program is maintainable by others.
• Report compliance posture and audit readiness to security leadership on a regular cadence.

Skills

SOC 2 Type II ownership

ISO/IEC 27001 ownership

GRC platform administration (Vanta)

Scripting (Python/JavaScript)

Education

Bachelor's degree in Information Systems, Cybersecurity, or related field

Tools

Confluence

Jira

Vanta

Job description

Harbinger is seeking a Security Compliance Analyst to build and own our security program end-to-end in a fast-growing EV manufacturing environment. This hands-on role requires translating control requirements into concrete changes and preparing for external audits so we stay audit-ready.

You will own the control catalog, manage evidence, policies, and the Vanta-based tooling, collaborating with teams across the company to embed compliance into daily operations.