Staff Security & Compliance Engineer, GRC Automation

Emploive; Northern (KY); Hybrid; USD 160,000 - 190,000; Full time

Benefits offered by this job

Flexible Spending Account (FSA)

Employee Assistance Program (EAP)

Flexible Time Off

Parental Leave

Monthly internet reimbursement

Job summary

Harness is seeking a Staff Security Analyst to join the GRC team to scale security and compliance programs. You will drive commercial and Federal compliance initiatives, design automation, and collaborate with engineering, product, and business teams to preserve velocity while ensuring top-tier security.

Remote within the U.S. or hybrid options are available. The role demands 8–10 years of experience in security and GRC across cloud-native environments and modern frameworks.

Qualifications

• 8–10 years of security, compliance, and GRC program management experience.
• Extensive knowledge of ISO 27001, SOC 1, SOC 2, PCI-DSS, HIPAA.
• Experience building automation for security and compliance in cloud-native environments.
• Familiarity with Federal frameworks (NIST 800-53, FedRAMP, CMMC).
• Excellent communication and cross-functional collaboration.

Responsibilities

• Design, implement, and monitor commercial compliance controls across multiple standards.
• Develop automation to scale compliance tasks and CI/CD integration.
• Support Federal compliance initiatives including FedRAMP and DoD frameworks.
• Review contracts for security and privacy requirements.
• Collaborate with engineering, product, and business teams for secure velocity.
• Engage with auditors, assessors, and vendors.
• Identify, track, and mitigate compliance risks.
• Advise enterprise customers on security capabilities.

Skills

Security expertise

GRC program mgmt

Policy & governance

Communication skills

Project management

Cloud security

Ambiguity navigation

Tools

GRC tools

Automation tooling

AWS

GCP

Azure

CI/CD tooling

Job description

Harness is seeking a Staff Security Analyst to join the GRC team to scale security and compliance programs. You will drive commercial and Federal compliance initiatives, design automation, and collaborate with engineering, product, and business teams to preserve velocity while ensuring top-tier security.

Remote within the U.S. or hybrid options are available. The role demands 8–10 years of experience in security and GRC across cloud-native environments and modern frameworks.