Security Compliance Lead

San Francisco💼 Full-time💰 $158,000–$158,000🗓 2026-09-18 → 2026-09-26

Core

Lead Asana's FedRAMP Continuous Monitoring and authorization activities while supporting broader SOC 2 and ISO 27001 compliance frameworks.

Role type

Senior GRC Security Compliance Lead

Builds

FedRAMP compliance programme, audit evidence packages, and control maturity frameworks

Domain

Cloud Security / Regulatory Compliance

Deliverable

Required skills

FedRAMP expertise (ConMon, evidence collection), GRC framework knowledge (SOC 2, ISO 27001), audit coordination, stakeholder management, deadline-driven execution, technical curiosity

Preferred skills

Experience with GRC platforms, automation/scripting, NIST CSF knowledge, AI tool adoption

Technologies

GRC platforms, scripting, API integrations

Responsibilities

Own monthly FedRAMP ConMon submissions, track timebound FedRAMP requirements, serve as internal FedRAMP SME, support external audits, manage evidence collection workflows, drive controls maturity and remediation

Seniority

Senior, hands-on IC

Sourced via greenhouse · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.

About Asana

Software Development4405San Francisco, California, USFounded 2008

Asana is the work management platform for human + AI collaboration. We help organizations bring people, processes, and AI together to plan, track, and deliver work with clarity and speed. Powered by the Work Graph®, Asana gives teams the context and control they need to stay aligned, keep work moving, and scale impact. AI handles the busywork while humans stay in the loop to guide decisions and drive the business forward. More than 170,000 organizations — including Accenture, Amazon, Anthropic, Morningstar, and Suzuki — run their most critical work on Asana. For more information, visit www.asa