Security Compliance Lead — Build & Audit GRC Program

Harbinger; Garden Grove (CA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Stock options

401(k) retirement plan

Paid time off

Job summary

Harbinger is seeking a Security Compliance Analyst to build and own our security program end to end. This hands-on role requires taking a framework from gap assessment through external audit, owning controls, evidence, policies, and the tooling that ties it together.

You’ll grow the program as new opportunities expand scope. You’ll lead evidence collection, readiness for audits, and remediation, partnering with management to ensure timely closure and continuous improvement across the

Qualifications

• Bachelor’s degree or equivalent experience in information systems, cybersecurity, or related field.
• 5+ years in security compliance, GRC, or IT audit, with one framework through external audit or certification.

Responsibilities

• Own the control catalog, testing, evidence requirements, and crosswalks across frameworks.
• Translate control requirements into actionable changes for teams and verify implementation.
• Maintain corrective action plans with owners, dates, and evidence for closure.

Skills

Security compliance

GRC

IT audit

SOC 2 Type II

ISO 27001

NIST

Vanta

Jira

Confluence

Scripting (Python/JS)

Education

Bachelor’s degree in Information Systems or related field

Security certifications (CISA, CRISC, CompTIA Security+, ISO 27001 Lead Auditor)

Tools

Vanta

Jira

Confluence

Python/JavaScript scripting

Job description

Harbinger is seeking a Security Compliance Analyst to build and own our security program end to end. This hands-on role requires taking a framework from gap assessment through external audit, owning controls, evidence, policies, and the tooling that ties it together.

You’ll grow the program as new opportunities expand scope. You’ll lead evidence collection, readiness for audits, and remediation, partnering with management to ensure timely closure and continuous improvement across the