Security Analyst III

Job Summary

To facilitate the definition, implementation, and operation of security and privacy programs, the remote full-time Security Analyst III will manage security controls, automate compliance activities, and drive continuous improvement initiatives while collaborating with various stakeholders.

Key responsibilities

• Collaborate with stakeholders to design and operate security controls for the GRC program
• Use technology to automate compliance activities, including evidence gathering and control verification
• Track metrics to operationalize the health and maturity of the GRC program and support audits

Required qualifications

• Deep knowledge of cybersecurity, privacy, and risk management
• Experience in cloud-based SaaS environments, particularly AWS control frameworks
• Familiarity with security standards such as SOC 2, ISO 27001, and FedRAMP
• Information security experience in organizations with significant compliance requirements
• Strong understanding of privacy laws, including CCPA and GDPR