Remote opportunity at
HarnessStaff Security Analyst - GRC
Harness is an AI software delivery platform company that provides solutions to help engineering teams build and ship software safely and efficiently. The organization is currently…
Career Tools
About This Role
Harness is an AI software delivery platform company that provides solutions to help engineering teams build and ship software safely and efficiently. The organization is currently seeking a Staff Security Analyst - GRC to join its information security team and manage governance, risk, and compliance initiatives at scale. In this position, you will drive commercial compliance frameworks, build automation tools for security controls, and support federal compliance objectives. You will…
Job Description
Harness is an AI software delivery platform company that provides solutions to help engineering teams build and ship software safely and efficiently. The organization is currently seeking a Staff Security Analyst - GRC to join its information security team and manage governance, risk, and compliance initiatives at scale.
In this position, you will drive commercial compliance frameworks, build automation tools for security controls, and support federal compliance objectives. You will partner closely with engineering, product, and business units to embed privacy and security considerations directly into development workflows without slowing down delivery velocity. The role also involves handling customer trust inquiries, managing vendor risk, and engaging with external auditors.
This opportunity is ideal for an experienced security professional with a strong technical background in cloud environments and a history of building compliance programs from the ground up. You will navigate complex environments, handle competing priorities, and articulate security postures to both technical teams and enterprise customers.
Responsibilities
- Design, execute, and monitor commercial compliance controls for frameworks such as SOC 1, SOC 2, ISO 27001, PCI-DSS, and HIPAA
- Engineer and implement automation solutions to scale compliance tasks, test controls, and integrate checks into CI/CD pipelines
- Assist with federal compliance frameworks and initiatives including FedRAMP Moderate+, CMMC, and DoD IL
- Review contracts for security and privacy terms, complete customer questionnaires, and maintain the customer trust portal
- Advise product, engineering, and business teams on security and privacy by design
- Manage relationships with external auditors, suppliers, assessors, and enterprise clients
- Identify, monitor, and mitigate compliance risks and supply chain security threats
Requirements
- 8 to 10 years of professional background in security, compliance, and GRC program management
- Extensive working knowledge of commercial regulations and certifications like ISO 27001, SOC 1, SOC 2, PCI-DSS, and HIPAA
- Experience utilizing GRC tools and building automation for security and compliance controls within cloud-native architectures such as AWS, GCP, or Azure
- Familiarity with federal compliance frameworks including NIST 800-53, FedRAMP, and CMMC
- Technical familiarity with enterprise SaaS infrastructure and applications
Qualifications
- Hands-on background building, delivering, or managing a FedRAMP-compliant service offering or achieving an ATO
- Familiarity with federal and defense environments such as Platform One, Iron Bank, CMMC, or DoD IL
- Understanding of AWS or GCP console configurations and management best practices
- Professional credentials such as ISO 27001 Lead Implementer or Auditor, PCI QSA, CISA, CISSP, PMP, AWS or GCP Professional designations, or FedRAMP-specific certifications
- Experience evaluating and using AI securely
- Exposure to Kubernetes, SBOMs, SLSA, or data loss prevention technologies
Core Skills
Benefits
- Competitive salary ranging from USD 150,000 to 164,000 annually
- Comprehensive healthcare coverage
- Flexible Spending Account
- Flexible work schedule and flexible time off
- Parental leave
- Employee Assistance Program
- Monthly internet reimbursement
- Regular social and team building events
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary for the Staff Security Analyst - GRC role?
The anticipated base salary range is between USD 150,000 and 164,000 per year, which may be supplemented by equity and benefits.
What are the remote work options for this position?
The posting specifies that the role can be performed remotely within the United States or as a hybrid arrangement out of one of the company offices.
What level of experience is required?
Candidates must have a minimum of 8 to 10 years of relevant industry experience in security, compliance, and GRC program management.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
