Senior GRC Security & Automation Analyst (Remote)

XYZ Venture Capital; United States; Remote; USD 150,000 - 164,000; Full time

Benefits offered by this job

Competitive salary

Healthcare benefits

FSA

Flexible work schedule

EAP

Time off and parental leave

Team events

Internet reimbursement

Job summary

Harness is looking for a Staff Security Analyst to join the GRC team, advising, building, and operating security and compliance programs at scale. You will drive commercial compliance across SOC/ISO, and assist with federal initiatives while partnering with engineering to maintain velocity and security.

You will design solutions to enable security goals, work with cross‑functional teams, and help manage vendor risk and audits in a fast-paced environment.

Qualifications

• 8–10 years of relevant experience in security, compliance, and GRC program management.
• Extensive exposure to commercial regulations, frameworks and compliance certifications (ISO 27001, SOC 1, SOC 2, PCI-DSS, HIPAA).
• Experience with GRC tools and automation for security and compliance in cloud environments (AWS, GCP, Azure).

Responsibilities

• Design, implement, and monitor commercial compliance controls with SOC 1/2, ISO 27001, PCI-DSS, and HIPAA.
• Develop automation to scale compliance tasks and integrate checks into CI/CD pipelines.
• Support Federal compliance initiatives (FedRAMP, NIST 800-53) as Harness expands public sector.
• Review contracts for security requirements and manage customer security questionnaires.

Skills

Security leadership

GRC program mgmt

Automation

Cloud security

Education

ISO 27001

SOC 1

SOC 2

PCI-DSS

HIPAA

Tools

GRC tools

Automation scripts

Job description

Harness is looking for a Staff Security Analyst to join the GRC team, advising, building, and operating security and compliance programs at scale. You will drive commercial compliance across SOC/ISO, and assist with federal initiatives while partnering with engineering to maintain velocity and security.

You will design solutions to enable security goals, work with cross‑functional teams, and help manage vendor risk and audits in a fast-paced environment.