Senior GRC & Security Automation Architect (Remote)

Jobicy; United States; Remoto; USD 150.000 - 164.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive salary

Comprehensive healthcare benefits

Flexible Spending Account (FSA)

Flexible work schedule

Employee Assistance Program (EAP)

Flexible Time Off and Parental Leave

Monthly internet reimbursement

Descrizione del lavoro

Harness is seeking a Staff Security Analyst to join the GRC team. You will lead commercial compliance, automate controls, and support federal initiatives across a cloud‑native, SaaS environment.

This role emphasizes collaborating with engineering and business teams to preserve velocity while maintaining top security and regulatory posture. The position requires 8–10 years of experience in security, broad regulatory knowledge (ISO 27001, SOC, PCI-DSS, HIPAA), and hands‑on automation.

Competenze

• 8-10 years in security, compliance, and GRC program management.
• Extensive exposure to ISO 27001, SOC 1, SOC 2, PCI‑DSS, HIPAA.

Mansioni

• Commercial Compliance Management: Design, implement, and monitor commercial compliance controls for SOC 1, SOC 2, ISO 27001, PCI‑DSS, and HIPAA.
• GRC Engineering & Automation: Develop automation to scale compliance tasks and integrate checks into CI/CD pipelines.
• Federal Compliance Support: Contribute to FedRAMP, NIST 800‑53, CMMC initiatives and DoD IL programs.
• Customer Trust & Advisory: Review contracts for security/privacy and maintain customer security questionnaires.
• Cross‑Functional Collaboration: Provide guidance to ensure security by design for engineering, product, and business.
• Stakeholder Engagement: Manage relationships with auditors, assessors, and enterprise prospects.
• Risk Management: Identify, track, and mitigate risks across compliance projects and vendor risk.
• Evangelism: Communicate Harness security capabilities to enterprise customers and auditors.

Conoscenze

Cybersecurity

GRC program management

Automation

Cloud security

Strumenti

GRC tools

AWS

GCP

Azure

Descrizione del lavoro

Harness is seeking a Staff Security Analyst to join the GRC team. You will lead commercial compliance, automate controls, and support federal initiatives across a cloud‑native, SaaS environment.

This role emphasizes collaborating with engineering and business teams to preserve velocity while maintaining top security and regulatory posture. The position requires 8–10 years of experience in security, broad regulatory knowledge (ISO 27001, SOC, PCI-DSS, HIPAA), and hands‑on automation.