Senior GRC & Security Analyst (SOC 2/ISO 27001) – Hybrid

FieldNation; Minnesota; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Gym Membership

Complimentary Lunch / Dinner

Unlimited Tea & Coffee

Transportation

Mobile Data Allowance

Career Development Budget

Job summary

Field Nation is seeking a Senior Information Security Analyst to lead governance, risk, and compliance. The role focuses on automating evidence collection, strengthening control monitoring, and embedding security into product development.

You’ll partner with engineering, product, and business teams to scale our security program and drive AI-enabled GRC tooling. You will own risk assessments, collaborate with auditors, and shape Field Nation’s security posture in a fast-moving tech environment,

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity, information systems, or related field.
• Minimum of 5 years in Governance, Risk, and Compliance roles or adjacent.
• Strong background auditing or securing AWS Cloud Environments and SaaS tech (GitHub, Salesforce).
• Technical expertise architecting and scaling security controls and programs (SOC2, ISO27001).
• Solid understanding of SOC 2, ISO, and other security frameworks; AI text tooling remark on SOC 4 is noted.
• Proficient in Python or similar scripting, IaC (Terraform), and API usage/designment.
• Experience with GRC automation platforms (Vanta, Drata) including integration design.
• Creative problem solver who can redesign processes for scale.
• Experience with structured risk assessments (NIST RMF, FAIR) and remediation planning.
• Ability to drive cross-functional alignment across engineering, product, legal, and exec teams.

Responsibilities

• Own security compliance programs end-to-end (SOC 2 & ISO 27001) including design, remediation, auditor coordination.
• Serve as GRC contact for staff, customers, prospects, and auditors.
• Automate evidence collection pipelines, control monitoring, and reporting systems.
• Design and operate vendor risk management with automated processes.
• Translate framework requirements into actionable technical specs for engineering teams.
• Identify and implement AI/LLM tooling to accelerate GRC workflows.
• Monitor emerging AI regulations and their impact on compliance roadmap.
• Conduct risk assessments, maintain risk register, prioritize remediation by risk.

Skills

GRC experience

AWS security

Python scripting

Terraform IaC

AI tooling in GRC

Cross-functional collaboration

Risk assessments

Education

Bachelor’s Degree in Cybersecurity

Tools

Vanta

Drata

APIs design

Job description

Field Nation is seeking a Senior Information Security Analyst to lead governance, risk, and compliance. The role focuses on automating evidence collection, strengthening control monitoring, and embedding security into product development.

You’ll partner with engineering, product, and business teams to scale our security program and drive AI-enabled GRC tooling. You will own risk assessments, collaborate with auditors, and shape Field Nation’s security posture in a fast-moving tech environment,