Harness
Staff Security Analyst - GRC
$150K–$164K
U.S. (Remote) · Remote · Staff · Full-time · Posted Sep 21, 2026
- Experience
- Minimum of 8–10 years of relevant industry experience.
About the job
Leads commercial security and compliance programs, builds GRC automation, and supports customer trust and federal compliance initiatives.
What you'll do
- Design and monitor commercial compliance controls; automate control testing and continuous compliance checks.
- Support federal compliance initiatives and customer trust work, including reviewing security requirements and completing questionnaires.
- Manage compliance risks and engage with engineering teams, suppliers, auditors, assessors, and enterprise customers.
What they ask for
- 8–10 years of relevant industry experience in security, compliance, and GRC program management.
- Extensive exposure to commercial frameworks and certifications, including ISO 27001, SOC 1, SOC 2, PCI-DSS, and HIPAA.
- Experience with GRC tools and building compliance automation in a cloud-native environment (AWS, GCP, or Azure).
- Working knowledge or exposure to federal compliance frameworks such as NIST 800-53, FedRAMP, or CMMC.
Nice to have
- Hands-on experience with a FedRAMP-compliant service or achieving an ATO; familiarity with Platform One, Iron Bank, CMMC, or DoD IL.
- Relevant security or technical certifications; experience with AI in secure environments, Kubernetes, SBOMs, SLSA, or DLP.
Pay
$150,000 and $164,000 USD annually (base salary)
Tools
AWS, GCP, Azure, CI/CD, Kubernetes, SBOMs, SLSA, DLP
AI focus
May assess and use AI in a secure environment; the posting lists this as a bonus qualification.
Model-written summary · the original posting is authoritative