Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$130к-210к/год
$150к$170кмедиана$200к
По похожим ролям (49) ~ $170к/год
На СНГ рынке: $5.1к/мес ($3.7к - $5.5к)
86
Хорошая вакансия
развернуть
Роль чётко очерчена в рамках зрелой GRC-программы продуктовой компании: предстоит работать с контролями безопасности, автоматизацией, аудитами и инженерными командами.
?Дублирующийся раздел
Чёткая зона ответственности
Продуктовая компания
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security Analyst - Governance, Risk, and Compliance (GRC/SaaS): Designing and operating security controls and compliance programs for a cloud-based SaaS platform with an accent on AWS control environments, privacy, and regulatory frameworks. Focus on automating evidence collection, measuring program maturity, supporting audits, and applying AI to deepen security coverage.
Location: Remote - US
Pay: $129,900–$178,640 for Zone 3, $137,600–$189,200 for Zone 2, or $152,900–$210,210 for Zone 1, depending on US geographic location.
Company
hirify.global provides a software delivery platform for controlled feature releases, experimentation, targeted customer experiences, and safer application migrations.
What you will do
Design and operate security controls within the Governance, Risk, and Compliance program.
Automate compliance activities, including evidence collection and control verification.
Track quantitative and qualitative metrics to measure program health and maturity.
Drive continuous improvement initiatives and contribute to security standards, policies, and process documentation.
Support internal and external audits and assessments.
Partner with product and infrastructure delivery teams on engineering projects involving GRC requirements.
Requirements
Deep knowledge and practical skill in cybersecurity, privacy, and risk management.
Excellent written and verbal communication skills and experience working on collaborative projects.
Experience with modern cloud-based SaaS organizations, specifically AWS control environments.
Information security experience in an organization with significant compliance requirements.
Strong familiarity with SOC 2, ISO 27001, ISO 27701, FedRAMP, CCPA, and GDPR.
Familiarity with Confluence, Slack, and GitHub.
Proactive approach to identifying compliance drift, building repeatable governance systems, and improving controls.
Ability to build trusted relationships, communicate clearly, and provide practical alternatives when declining requests.
Curiosity about engineering systems and the use of AI in security and compliance work.
Nice to have
Knowledge of software development and architecture.
CCSP, PCI QSA, CISSP, CISA, or CISM certification.
Culture & Benefits
Remote work within the United States.
Collaborative, humble, open, respectful, and kind team environment.
Salary plus restricted stock units.
Health, vision, dental, and mental health benefits.
Equal opportunity workplace committed to diversity.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →