Remote Senior GRC & Security Automation Lead

Harness; United States; Hybrid; USD 160,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive healthcare benefits

FSA

Flexible work schedule

Employee Assistance Program (EAP)

Flexible Time Off and Parental Leave

Team events

Internet reimbursement

Job summary

Harness is seeking a Staff Security Analyst to join the GRC team and help advance security and compliance efforts across the organization. You will work with engineering and product teams to maintain velocity while enforcing robust controls.

The role emphasizes commercial and federal compliance (SOC 1/2, ISO 27001, HIPAA, FedRAMP, NIST 800-53) and requires strong automation and governance capabilities. Remote US or hybrid office options are supported.

Qualifications

• Minimum of 8-10 years of relevant industry experience in security, compliance, and GRC program management.
• Extensive exposure to commercial industry regulations, frameworks, and compliance certifications (ISO 27001, SOC 1, SOC 2, PCI-DSS, HIPAA).
• GRC tools experience and automation for security and compliance controls in a cloud-native environment (AWS, GCP, or Azure).
• Familiarity with Federal compliance frameworks (e.g., NIST 800-53, FedRAMP, CMMC) and expanding programs.
• Strong cybersecurity acumen and proficiency with enterprise SaaS apps and infrastructure.
• Excellent project management and organizational skills; ability to build new programs from scratch.
• Clear, concise communication with technical and non-technical stakeholders.
• Comfort navigating ambiguity and driving clarity in fast-paced environments.

Responsibilities

• Commercial Compliance Management: Design, implement, and monitor commercial compliance controls with SOC 1/2, ISO 27001, PCI-DSS, HIPAA.
• GRC Engineering & Automation: Develop automation to scale compliance tasks and CI/CD checks.
• Federal Compliance Support: Contribute to Federal compliance initiatives (FedRAMP, CMMC, DoD IL).
• Customer Trust & Advisory: Review contracts, answer security questionnaires, maintain trust portal.
• Cross-Functional Collaboration: Advise security/privacy by design for engineering, product, and business teams.
• Stakeholder Engagement: Manage relationships with auditors, suppliers, assessors, and enterprise prospects.
• Risk Management: Identify, track, and mitigate compliance risks; monitor supply chain security.
• Evangelism: Communicate Harness security capabilities to enterprise customers and auditors.

Skills

GRC tools

Automation scripting

Security certifications

Cloud security

FedRAMP/CMMC

Job description

Harness is seeking a Staff Security Analyst to join the GRC team and help advance security and compliance efforts across the organization. You will work with engineering and product teams to maintain velocity while enforcing robust controls.

The role emphasizes commercial and federal compliance (SOC 1/2, ISO 27001, HIPAA, FedRAMP, NIST 800-53) and requires strong automation and governance capabilities. Remote US or hybrid office options are supported.