Security Analyst - Governance, Risk, and Compliance
Core
Define, implement, and operate security and privacy programs to assess risks and maintain compliance for LaunchDarkly's global systems.
Role type
Security Analyst III (GRC)
Builds
Security controls, compliance evidence, and audit readiness for a SaaS platform.
Domain
Cybersecurity, Privacy, Risk Management, Cloud (AWS)
Deliverable
dashboards & analysis
Required skills
Cybersecurity knowledge, Risk management, Compliance frameworks (SOC 2, ISO 27001, FedRAMP), Privacy laws (CCPA, GDPR), Cloud security (AWS), Audit support, Stakeholder collaboration
Preferred skills
Software development/architecture knowledge, CCSP, CISSP, CISA, CISM, PCI QSA
Technologies
AWS, Confluence, Slack, Github
Responsibilities
Design and operate security controls for the GRC program, Automate compliance activities, Track program health metrics, Drive continuous improvement projects, Contribute to security standards documentation, Support internal and external audits
Seniority
Mid-level, hands-on IC