Staff Security Analyst

Job Summary

Working remotely within the U.S., the full-time Staff Security Analyst will lead security efforts to manage compliance certifications, design security solutions, and collaborate with engineering teams to ensure robust security and governance across the organization.

Key responsibilities

• Design and implement commercial compliance controls for SOC 1, SOC 2, ISO 27001, PCI-DSS, and HIPAA
• Develop automation solutions for compliance tasks and integrate continuous compliance checks into the CI/CD pipeline
• Support Federal compliance initiatives and frameworks as the company expands its public sector footprint

Required qualifications

• 8-10 years of experience in security, compliance, and GRC program management
• Extensive knowledge of commercial regulations and compliance certifications (ISO 27001, SOC 1, SOC 2, PCI-DSS, HIPAA)
• Experience with GRC tools and building automation for security and compliance controls in cloud environments
• Familiarity with Federal compliance frameworks (e.g., NIST 800-53, FedRAMP, CMMC)
• Strong project management skills with the ability to handle multiple priorities and build new programs from scratch