Staff Security Analyst – GRC

🕒 Setembro 21

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $150.000 - $164.000 / ano

⏰ Tempo Integral

🔴 Especialista

🔐 Analista de Segurança da Informação

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 52 dias.
• As vagas desta empresa costumam ser preenchidas em 55 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Harness

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 2016

☁️ SaaS

🔒 Cibersegurança

Software • SaaS • Cybersecurity

A Harness é uma plataforma de entrega de software que permite às organizações simplificar o processo de desenvolvimento por meio de Integração Contínua (CI) e Entrega Contínua (CD). A plataforma oferece ferramentas para gerenciamento de repositórios de código, infraestrutura como código e feature flags, e fornece insights sobre processos de engenharia de software. A Harness capacita os desenvolvedores a aumentar a produtividade enquanto garante a segurança e a confiabilidade no ciclo de vida de implantação de software.

Descrição

• Advise, build, and operate security and compliance programs at scale within the GRC team and Information Security organization • Lead security efforts to acquire and maintain commercial compliance certifications while assisting with Federal initiatives • Design solutions that support Harness security goals and collaborate with business and engineering teams • Design, implement, and continuously monitor compliance controls for SOC 1, SOC 2, ISO 27001, PCI-DSS, and HIPAA • Develop automation to scale compliance tasks, automate control testing, integrate continuous compliance checks into CI/CD pipelines, and streamline reporting • Contribute to Federal compliance initiatives involving FedRAMP Moderate+, CMMC, DoD IL, and FedRAMP 20x • Review customer contracts for security and privacy requirements • Complete customer security questionnaires and maintain the customer trust portal • Provide guidance for security and privacy by design across engineering, product, and business initiatives • Manage relationships with suppliers, auditors, assessors, and enterprise prospects • Identify, track, and mitigate compliance project risks • Monitor supply chain security and manage vendor risk • Explain Harness security capabilities and controls to enterprise customers and regulatory auditors

🎯 Requisitos

• Minimum of 8–10 years of relevant industry experience in security, compliance, and GRC program management • Extensive exposure to commercial industry regulations, frameworks, and compliance certifications, including ISO 27001, SOC 1, SOC 2, PCI-DSS, and HIPAA • Experience with GRC tools • Ability to build automation for security and compliance controls in a cloud-native environment using AWS, GCP, or Azure • Working knowledge or exposure to Federal compliance frameworks such as NIST 800-53, FedRAMP, and CMMC • Strong cybersecurity acumen • Technical proficiency with enterprise SaaS applications and infrastructure • Project management and organizational skills • Clear written and verbal communication skills • Ability to partner with technical engineering teams and non-technical stakeholders • Hands-on experience building, delivering, or managing a FedRAMP-compliant service offering or achieving an ATO is a bonus • Familiarity with Platform One, Iron Bank, CMMC, or DoD IL is a bonus • Relevant security or technical certifications such as ISO 27001 Lead Implementer/Auditor, PCI QSA, CISA, CISSP, PMP, AWS/GCP Professional, or FedRAMP-specific credentials are a bonus • Experience assessing and utilizing AI in a secure environment is a bonus • Exposure to Kubernetes, SBOMs, SLSA, and/or DLP is a bonus

🏖️ Benefícios

• Competitive salary • Comprehensive healthcare benefits • Flexible Spending Account (FSA) • Flexible work schedule • Employee Assistance Program (EAP) • Flexible Time Off and Parental Leave • Monthly, quarterly, and annual social and team building events • Monthly internet reimbursement • Equity may be included in the compensation package

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo