Security Analyst - Governance, Risk, and Compliance

Responsibilities

• Collaborate with stakeholders to design and operate security controls that comprise the LaunchDarkly GRC program
• Use technology to automate compliance activities like gathering evidence and verifying controls
• Operationalize the health and maturity of the program by tracking metrics based on quantitative and qualitative data
• Drive progress towards results for GRC-related continuous improvement projects
• Contribute to documentation for security standards, policies, and processes
• Support audits and assessments with internal and external stakeholders
• Work with product and infrastructure delivery teams on engineering projects related to GRC requirements

Qualifications

• Deep cybersecurity, privacy, and risk management knowledge and skill
• Excellent communication skills - written and verbal
• Experience working on collaborative projects
• Depth with modern cloud-based SaaS organizations - specifically AWS control environments
• Information security experience at an organization with significant compliance requirements
• Strong familiarity with security standards (SOC 2, ISO 27001, ISO 27701, FedRAMP) as well as privacy laws (CCPA and GDPR)
• Familiarity with LaunchDarkly’s collaboration tools like Confluence, Slack, and Github

Benefits

Restricted Stock Units (RSUs), health, vision, and dental insurance, and mental health benefits in addition to salary.