Senior Information Security Analyst, Grc

Fieldnation; Minnesota; Híbrido; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical Insurance

Gym Membership

Complimentary Lunch / Dinner

Unlimited Tea & Coffee

Transportation

Mobile Data Allowance

Career Development Budget

Descripción de la vacante

Field Nation is seeking a Senior Information Security Analyst to lead governance, risk, and compliance. The role focuses on automating evidence collection, strengthening control monitoring, and embedding security into product development.

You’ll partner with engineering, product, and business teams to scale our security program and drive AI-enabled GRC tooling. You will own risk assessments, collaborate with auditors, and shape Field Nation’s security posture in a fast-moving tech environment,

Formación

• Bachelor’s degree or equivalent experience in cybersecurity, information systems, or related field.
• Minimum of 5 years in Governance, Risk, and Compliance roles or adjacent.
• Strong background auditing or securing AWS Cloud Environments and SaaS tech (GitHub, Salesforce).
• Technical expertise architecting and scaling security controls and programs (SOC2, ISO27001).
• Solid understanding of SOC 2, ISO, and other security frameworks; AI text tooling remark on SOC 4 is noted.
• Proficient in Python or similar scripting, IaC (Terraform), and API usage/designment.
• Experience with GRC automation platforms (Vanta, Drata) including integration design.
• Creative problem solver who can redesign processes for scale.
• Experience with structured risk assessments (NIST RMF, FAIR) and remediation planning.
• Ability to drive cross-functional alignment across engineering, product, legal, and exec teams.

Responsabilidades

• Own security compliance programs end-to-end (SOC 2 & ISO 27001) including design, remediation, auditor coordination.
• Serve as GRC contact for staff, customers, prospects, and auditors.
• Automate evidence collection pipelines, control monitoring, and reporting systems.
• Design and operate vendor risk management with automated processes.
• Translate framework requirements into actionable technical specs for engineering teams.
• Identify and implement AI/LLM tooling to accelerate GRC workflows.
• Monitor emerging AI regulations and their impact on compliance roadmap.
• Conduct risk assessments, maintain risk register, prioritize remediation by risk.

Conocimientos

GRC experience

AWS security

Python scripting

Terraform IaC

AI tooling in GRC

Cross-functional collaboration

Risk assessments

Educación

Bachelor’s Degree in Cybersecurity

Herramientas

Vanta

Drata

APIs design

Descripción del empleo

Who we are: Field Nation brings companies and service professionals together through an integrated, easy-to-use platform. We support businesses looking to grow their service offerings while also empowering technicians to leverage their skills on their own terms. Our mission is to help the service delivery industry do great work, and we live that mission by doing great work for the companies and service professionals that depend on us.

Why is this role important to Field Nation?

The Information Security team works across Field Nation to implement, monitor, and continuously improve Field Nation's security, risk, and compliance programs. As a Senior Information Security Analyst in Governance, Risk, and Compliance (GRC), you will lead and scale Field Nation's compliance program (SOC 2, ISO 27001, etc.). This role will own compliance operations, build automated evidence collection and control monitoring systems, and design risk management processes that keep pace with the business. The role requires a technical GRC professional who partners directly with engineering, product, and business teams to embed security into how Field Nation builds and ships software. This role will also help in identifying and building AI tooling to accelerate GRC workflows.

What you’ll do:

• Own Field Nation’s security compliance programs (SOC 2 & ISO27001) end to end, from control design through remediation tracking and auditor coordination.

• Serve as the GRC point of contact for Field Nation staff, customers, prospects, and auditors.

• Replace manual compliance workflows with automated evidence collection pipelines, control monitoring, and reporting systems.

• Design and operate the vendor risk management program, including assessment methodology, risk tiering, and ongoing monitoring through the use of automation and/or AI.

• Translate compliance framework requirements into tailored technical specifications that engineering teams can implement without friction.

• Identify and implement opportunities to use AI and LLM tooling to accelerate GRC workflows, including security questionnaire responses, evidence analysis, policy drafting, and control gap detection.

• Monitor emerging AI regulations and governance frameworks, and assess their impact on the company's compliance obligations and product roadmap.

• Conduct risk assessments using structured methodologies, maintain the risk register, and work with control owners to prioritize remediation based risk.

What you’ll need:

• Bachelor’s Degree in Cybersecurity, Information Systems, Computer Engineering, or related discipline or equivalent experience

• Minimum of 5 years of work experience in Governance, Risk, and Compliance roles or adjacent

• A strong background in auditing or securing AWS Cloud Environments and SaaS-based tech (Github, Salesforce, etc.)

• Technical expertise in designing, implementing, validating, and scaling security controls and programs that address SOC2 and ISO 27001 requirements.

• Expert understanding of SOC 2, ISO, and other security compliance frameworks. If using AI to generate text, include a sentence on SOC 4.

• Technical proficiency in Python (or similar scripting languages), Infrastructure-as-Code (Terraform), or hands-on experience designing, building, and consuming APIs.

• Experience with GRC automation platforms (Vanta, Drata, or similar), including configuration, integration design, and workflow automation, not just end-user operations.

• Creative problem solver who breaks down ambiguous compliance challenges into clear engineering solutions. You question inherited processes and redesign them for scale.

• Hands-on experience conducting security risk assessments using structured methodologies (NIST RMF, FAIR, or similar) and translating findings into prioritized, actionable remediation plans.

• Proven ability to drive cross-functional alignment across engineering, product, legal, and executive teams without direct authority. You operate with urgency in fast-moving environments and deliver meaningful outcomes across competing priorities.

• Strong written and verbal communicator who translates technical security risk into language that resonates with engineers, executives, and employees. You elevate the team around you through coaching and knowledge sharing.

Working Hours:

• 1:00 PM - 10:00 PM (BD Time), Monday to Friday
• Weekly 2 days in-office, 3 days remote (Hybrid)

Salary Range:

• BDT 150,000 - 210,000 (Monthly)

Why we think you'll love it here:

At Field Nation, we believe great work deserves great support. Here’s a snapshot of the benefits designed to reward performance, support well-being and create an enjoyable workplace experience.

1. Compensation & Financial Rewards

Because hard work should feel like winning.

• Field Nation LLC Performance Reward – Because every citizen of Field Nation deserves a stake in the win!

• Festival Bonus – Celebrate the big festivals with some extra cheer (and cash!).

• Referral Bonus – Incentives for successful employee referrals.

• Gratuity – Honoring your long-term dedication

• Leave Encashment – Opportunity to encash unused annual leave balance at year-end.

2. Health & Wellness

Your body, mind, and family matter.

• Medical Insurance – Comprehensive health coverage for employees and their immediate family (spouse and children).

• Gym Membership – Stay fit, active, and energized.

3. Daily Operations & Office Perks

• Complimentary Lunch / Dinner – Because good work needs good food.

• Unlimited Tea & Coffee – Keep the energy flowing.

• Transportation – Helping you get to work hassle-free.

• Mobile Data Allowance – Allowances to ensure connectivity.

4. Professional Development

• Career Development Budget – Dedicated funds for professional learning and growth.

5. Culture, Events & Time Off

Fostering work-life balance and strong team connections.

• Work Model: Hybrid (2 days in-office, 3 days remote per week) – balance is key.
• Summer & Winter Field Weeks – Two annual team retreats to connect, collaborate, and recharge.
• Quarterly Team Outing Budget – Enjoy exciting activities and quality time with your team to bond, relax and celebrate together.
• Occasional Gifts – Surprises and gifts to celebrate milestones & welcome new faces.
• Leave Benefits:
  • Maternity Leave
  • Paternity Leave
  • Hajj/Umrah Leave
  • Paid Time Off – Take the time you need! Covers annual, casual, and sick leave so you can recharge and come back ready to shine.

Why Field Nation?

At Field Nation, we are breaking the barriers to work and enabling the gig economy. We’re a tech company that offers a web-based marketplace solution for buyers and sellers of contract services to simply connect, work, and manage their business. We look for collaborators, innovators, and problem solvers to join us in our common purpose of changing the way work gets done. We were named a Top Workplace by the Star Tribune in 2017, 2018, 2019, and a Top 150 Workplace in 2020. We look to hire extraordinary people and provide them extraordinary benefits.