Security GRC Analyst - Engineering Assurance Partner

Leadout Capital; San Francisco (CA); On-site; USD 140,000 - 180,000; Full time

Job summary

Leadout Capital seeks a technically strong Security Governance professional to bridge Security & Compliance with Engineering implementation. You will be the technical voice of Assurance, partnering with Engineering, Product Security, Legal, and other teams to translate requirements into practical governance for scalable systems.

You’ll develop end-to-end understanding of platforms, architectures, and workflows, assess risk in M&A contexts, and help embed compliance early in development cycles.

Qualifications

• Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements.
• Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks.
• Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes.

Responsibilities

• Support Assurance and Engineering Alignment by translating governance requirements into actionable guidance.
• Evaluate control implementation with Engineering across applications, platforms, and cloud environments.
• Create feedback loops to improve control design, standards, and governance processes.
• Make requirements engineer-usable by articulating regulatory expectations into clear technical specs for Engineering teams.
• Develop second-line oversight to audit and validate operational controls across engineering groups (e.g., attestations, CRE checks).
• Engage with security champions and stakeholders to drive governance adoption and reporting.

Skills

Security engineering

Cloud security

Product security

IAM

Platform engineering

IT governance

Job description

Leadout Capital seeks a technically strong Security Governance professional to bridge Security & Compliance with Engineering implementation. You will be the technical voice of Assurance, partnering with Engineering, Product Security, Legal, and other teams to translate requirements into practical governance for scalable systems.

You’ll develop end-to-end understanding of platforms, architectures, and workflows, assess risk in M&A contexts, and help embed compliance early in development cycles.