Security Analyst - Governance, Risk, and Compliance (West)
Core
Define, implement, and operate security and privacy programs to assess risks and maintain compliance with frameworks like ISO 27001, SOC 2 Type II, and FedRAMP.
Role type
Senior IC Security Analyst (GRC)
Builds
Security controls, compliance evidence, and audit readiness for a global SaaS platform
Domain
Cybersecurity, Privacy, Risk Management, Cloud Compliance (AWS)
Deliverable
Dashboards & analysis
Required skills
Cybersecurity, Privacy, Risk Management, Cloud-based SaaS environments (AWS), Security standards (SOC 2, ISO 27001, ISO 27701, FedRAMP), Privacy laws (CCPA, GDPR)
Preferred skills
Software development and architecture knowledge, CCSP, PCI QSA, CISSP, CISA, CISM certifications
Technologies
Confluence, Slack, Github
Responsibilities
Design and operate security controls for the GRC program, automate compliance activities, track program health metrics, support audits and assessments, contribute to security documentation, collaborate on engineering projects related to GRC requirements
Seniority
Senior, hands-on IC
