Staff Security Analyst — GRC & Compliance Automation

Split Software; United States; Hybrid; USD 150,000 - 164,000; Full time

Benefits offered by this job

Competitive salary

Healthcare benefits

Flexible Spending Account

Flexible work schedule

Employee Assistance Program (EAP)

Parental leave

Job summary

Harness is hiring a Staff Security Analyst to join the GRC team, advising and operating security programs at scale across commercial and federal compliance. You will lead efforts to obtain and maintain SOC 1/2, ISO 27001, PCI-DSS, and HIPAA, while building automation to streamline control testing within CI/CD.

You will collaborate with engineering and product teams to preserve velocity with top-tier security. Remote within the U.S.

Qualifications

• Minimum 8–10 years of relevant security, compliance, and GRC program management experience.
• Extensive exposure to commercial regulations, frameworks, and certifications (ISO 27001, SOC 1, SOC 2, PCI-DSS, HIPAA).
• Experience with GRC tools and automation for security controls in cloud environments (AWS, GCP, Azure).
• Familiarity with Federal compliance frameworks (NIST 800-53, FedRAMP, CMMC) is a plus.

Responsibilities

• Design, implement, and monitor commercial compliance controls (SOC 1/2, ISO 27001, PCI-DSS, HIPAA).
• Develop automation to scale compliance tasks and integrate checks into CI/CD pipelines.
• Support Federal compliance initiatives and frameworks (FedRAMP, DoD IL, NIST-based).
• Advise on contracts and security questionnaires to maintain customer trust.
• Collaborate with engineering, product, and business teams to ensure security-by-design.

Skills

Security governance

Compliance

GRC automation

CI/CD security

FedRAMP

CMMC

Tools

GRC tools

Cloud security tools

AWS

GCP

Azure

Job description

Harness is hiring a Staff Security Analyst to join the GRC team, advising and operating security programs at scale across commercial and federal compliance. You will lead efforts to obtain and maintain SOC 1/2, ISO 27001, PCI-DSS, and HIPAA, while building automation to streamline control testing within CI/CD.

You will collaborate with engineering and product teams to preserve velocity with top-tier security. Remote within the U.S.