Security Analyst - Governance, Risk, and Compliance

About Our Client

This organization operates in the software delivery and DevOps industry, addressing challenges related to slow and inefficient development cycles, costly outages, and fragmented customer experiences. The company provides a platform that enables developers to innovate on new features rapidly while maintaining control and safety through feature management. Their solutions support gradual rollouts, targeted customer experiences, and optimization of software releases to improve engineering productivity and business impact.

About the Opportunity

The Security Analyst - Governance, Risk, and Compliance is responsible for defining, implementing, and operating security and privacy programs within the organization. The role focuses on assessing and reducing security risks, advising stakeholders, and maintaining compliance with relevant frameworks such as ISO 27001, SOC 2 Type II, and FedRAMP. This position contributes to strengthening the organization''s security posture and ensuring trustworthiness for customers.

Responsibilities

• Collaborate with stakeholders to design and operate security controls within the governance, risk, and compliance program
• Automate compliance activities including evidence gathering and control verification
• Monitor program health and maturity through quantitative and qualitative metrics
• Lead continuous improvement projects related to governance, risk, and compliance
• Develop and maintain documentation for security standards, policies, and processes
• Support internal and external audits and assessments
• Partner with product and infrastructure teams on engineering projects related to compliance requirements

Requirements

• Extensive knowledge in cybersecurity, privacy, and risk management
• Strong communication skills, both written and verbal
• Experience collaborating on projects within cross-functional teams
• Familiarity with modern cloud-based SaaS environments, especially AWS
• Experience in information security within organizations with significant compliance requirements
• Knowledge of security standards such as SOC 2, ISO 27001, ISO 27701, and FedRAMP
• Understanding of privacy regulations including CCPA and GDPR
• Experience with collaboration tools like Confluence, Slack, and Github
• Nice to have: Knowledge of software development and architecture
• Nice to have: Certifications such as CCSP, PCI QSA, CISSP, or CISA/CISM

Pay

Target pay ranges based on geographic zones for Level 3 Security Analyst:

• Zone 1 (San Francisco/Bay Area or NYC Metropolitan Area): $136,500 to $187,660
• Zone 2 (Boston, DC, Irvine, LA, Monterey, Santa Barbara, Santa Rosa, Seattle): $122,800 to $168,850
• Zone 3 (Other US locations): $116,000 to $159,500

Benefits

Compensation may include Restricted Stock Units (RSUs), health, vision, dental insurance, and mental health benefits in addition to salary.