Назад
Company hidden
4 дня назад

Security Analyst - Governance, Risk, and Compliance

129 900 - 210 210$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Analyst - Governance, Risk, and Compliance (GRC/SaaS): Designing and operating security controls and compliance programs for a cloud-based SaaS platform with an accent on AWS control environments, privacy, and regulatory frameworks. Focus on automating evidence collection, measuring program maturity, supporting audits, and applying AI to deepen security coverage.

Location: Remote - US

Pay: $129,900–$178,640 for Zone 3, $137,600–$189,200 for Zone 2, or $152,900–$210,210 for Zone 1, depending on US geographic location.

Company

hirify.global provides a software delivery platform for controlled feature releases, experimentation, targeted customer experiences, and safer application migrations.

What you will do

  • Design and operate security controls within the Governance, Risk, and Compliance program.
  • Automate compliance activities, including evidence collection and control verification.
  • Track quantitative and qualitative metrics to measure program health and maturity.
  • Drive continuous improvement initiatives and contribute to security standards, policies, and process documentation.
  • Support internal and external audits and assessments.
  • Partner with product and infrastructure delivery teams on engineering projects involving GRC requirements.

Requirements

  • Deep knowledge and practical skill in cybersecurity, privacy, and risk management.
  • Excellent written and verbal communication skills and experience working on collaborative projects.
  • Experience with modern cloud-based SaaS organizations, specifically AWS control environments.
  • Information security experience in an organization with significant compliance requirements.
  • Strong familiarity with SOC 2, ISO 27001, ISO 27701, FedRAMP, CCPA, and GDPR.
  • Familiarity with Confluence, Slack, and GitHub.
  • Proactive approach to identifying compliance drift, building repeatable governance systems, and improving controls.
  • Ability to build trusted relationships, communicate clearly, and provide practical alternatives when declining requests.
  • Curiosity about engineering systems and the use of AI in security and compliance work.

Nice to have

  • Knowledge of software development and architecture.
  • CCSP, PCI QSA, CISSP, CISA, or CISM certification.

Culture & Benefits

  • Remote work within the United States.
  • Collaborative, humble, open, respectful, and kind team environment.
  • Salary plus restricted stock units.
  • Health, vision, dental, and mental health benefits.
  • Equal opportunity workplace committed to diversity.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →