Security Analyst III: GRC & Compliance, Automate & Elevate

Cervin; United States; On-site; USD 116,000 - 187,660; Full time

Job summary

LaunchDarkly is hiring a Security Analyst III to define, implement, and run security and privacy programs as part of the Governance, Risk, and Compliance team. You will drive risk reduction, advise stakeholders, and help maintain certifications including ISO 27001 and SOC 2 Type II.

You will partner with Legal, Revenue, and product teams; a strong focus on automation and data-driven metrics will be essential. This is a high-impact security role at a critical infrastructure company.

Qualifications

• Deep cybersecurity, privacy, and risk management knowledge and skill.
• Excellent communication skills - written and verbal.
• Experience working on collaborative projects.
• Depth with modern cloud-based SaaS organizations - specifically AWS control environments.
• Information security experience at an organization with significant compliance requirements.
• Strong familiarity with security standards (SOC 2, ISO 27001, ISO 27701, FedRAMP) as well as privacy laws (CCPA and GDPR).
• Familiarity with LaunchDarkly’s collaboration tools like Confluence, Slack, and Github.

Responsibilities

• Collaborate with stakeholders to design and operate security controls that comprise the LaunchDarkly GRC program.
• Use technology to automate compliance activities like gathering evidence and verifying controls.
• Operationalize the health and maturity of the program by tracking metrics based on quantitative and qualitative data.
• Drive progress towards results for GRC-related continuous improvement projects.
• Contribute to documentation for security standards, policies, and processes.
• Support audits and assessments with internal and external stakeholders.
• Work with product and infrastructure delivery teams on engineering projects related to GRC requirements.

Skills

Cybersecurity

Privacy & Risk

Communication

AWS controls

Compliance

Stakeholder collaboration

Information security

Tools

Confluence

Slack

Github

Job description

LaunchDarkly is hiring a Security Analyst III to define, implement, and run security and privacy programs as part of the Governance, Risk, and Compliance team. You will drive risk reduction, advise stakeholders, and help maintain certifications including ISO 27001 and SOC 2 Type II.

You will partner with Legal, Revenue, and product teams; a strong focus on automation and data-driven metrics will be essential. This is a high-impact security role at a critical infrastructure company.