Senior GRC Security Analyst — Remote

Bazeta; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Harness is seeking a Staff Security Analyst to join the GRC team, guiding security and compliance programs across commercial and federal contexts. You will design controls, automate testing, and collaborate with engineering to preserve velocity without sacrificing security.

The role emphasizes experience with ISO 27001, SOC 1/2, PCI-DSS, HIPAA, FedRAMP, NIST 800-53, and DoD IL, plus strong stakeholder engagement and program management skills.

Qualifications

• Minimum 8–10 years of security, compliance, and GRC program management experience.
• Extensive exposure to ISO 27001, SOC 1, SOC 2, PCI-DSS, HIPAA.
• Experience building automation for security and compliance controls in a cloud-native environment.
• Familiarity with federal frameworks (NIST 800-53, FedRAMP, CMMC) and DoD IL.
• Strong communication skills and ability to partner with technical and non-technical stakeholders.

Responsibilities

• Design, implement, and monitor commercial compliance controls with engineering teams.
• Develop automation to scale compliance tasks and integrate checks into CI/CD pipelines.
• Support federal compliance initiatives and public sector expansion.
• Review contracts for security and privacy requirements and manage customer trust programs.

Skills

Security governance

GRC program management

Regulatory compliance

Cloud security

Project management

Communication

Tools

GRC tools

Automation

CI/CD integration

Job description

Harness is seeking a Staff Security Analyst to join the GRC team, guiding security and compliance programs across commercial and federal contexts. You will design controls, automate testing, and collaborate with engineering to preserve velocity without sacrificing security.

The role emphasizes experience with ISO 27001, SOC 1/2, PCI-DSS, HIPAA, FedRAMP, NIST 800-53, and DoD IL, plus strong stakeholder engagement and program management skills.