Senior GRC Security Analyst: Automation & Compliance

harnessinc; United States; Remote; USD 150,000 - 164,000; Full time

Benefits offered by this job

Equity

Monthly internet reimbursement

Job summary

Harness in the United States seeks a Staff-level Security Analyst to design, build, and operate compliance programs at scale within the GRC team. This senior role blends technical security expertise with policy mastery to help engineering and business teams maintain delivery velocity while meeting audit requirements.

You will work across SOC 1/2, ISO 27001, PCI-DSS, HIPAA, and FedRAMP-like frameworks, with automation at the core, and collaborate with engineering, product, and business teams to

Qualifications

• 8-10+ years of security, compliance, and GRC program management.
• Hands-on GRC engineering and automation, including integrating compliance into CI/CD pipelines.
• Familiarity with federal frameworks such as FedRAMP, CMMC, DoD IL, and NIST 800-53.

Responsibilities

• Design, implement, and monitor commercial compliance controls for SOC 1, SOC 2, ISO 27001, PCI-DSS, and HIPAA environments.
• Build GRC automation solutions with automated testing, CI/CD checks, and reporting.
• Support federal compliance initiatives and frameworks as public sector footprint expands.
• Review contracts for security and privacy requirements and maintain customer security questionnaires.
• Identify, track, and mitigate compliance risks, including supplier risk management.
• Engage with external suppliers, auditors, assessors, and prospects to communicate security capabilities.

Skills

GRC engineering

CI/CD security integration

Automation in security

Security questionnaires

Contract review

Job description

Harness in the United States seeks a Staff-level Security Analyst to design, build, and operate compliance programs at scale within the GRC team. This senior role blends technical security expertise with policy mastery to help engineering and business teams maintain delivery velocity while meeting audit requirements.

You will work across SOC 1/2, ISO 27001, PCI-DSS, HIPAA, and FedRAMP-like frameworks, with automation at the core, and collaborate with engineering, product, and business teams to