Lead GRC & Security Automation (Remote)

Jobgether; United States; Hybrid; USD 150,000 - 164,000; Full time

Benefits offered by this job

Remote work within the United States

Hybrid option with designated offices

Job summary

Jobgether in the United States is seeking a Staff Security Analyst - GRC to lead security and compliance programs at scale. You will drive frameworks including ISO 27001, SOC 1/2, PCI-DSS, and HIPAA, balancing regulatory needs with product velocity in a cloud-native environment.

This senior role combines hands-on engineering with automation and risk management, partnering across engineering, product, and auditors.

Qualifications

• 8-10+ years of experience in security, compliance, GRC, or security program management.
• Extensive experience with ISO 27001, SOC 1, SOC 2, PCI-DSS, and HIPAA.
• Experience building automation for security and compliance in cloud-native environments such as AWS, GCP, or Azure.

Responsibilities

• Design and implement security controls across SOC 1/2, ISO 27001, PCI-DSS, and HIPAA.
• Develop GRC automation to scale testing and CI/CD integration.
• Collaborate with engineering, product, and auditors to manage vendor risk and regulatory requirements.
• Communicate security capabilities to enterprise customers and regulatory bodies.

Skills

GRC leadership

Automation & CI/CD

Risk management

Communication skills

Cloud security

Education

Bachelor's degree in Information Security or related field

Tools

GRC tools

CI/CD integration

FedRAMP/DoD tooling

Job description

Jobgether in the United States is seeking a Staff Security Analyst - GRC to lead security and compliance programs at scale. You will drive frameworks including ISO 27001, SOC 1/2, PCI-DSS, and HIPAA, balancing regulatory needs with product velocity in a cloud-native environment.

This senior role combines hands-on engineering with automation and risk management, partnering across engineering, product, and auditors.