Harness
Staff Security Analyst - GRC
U.S · Staff+
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Evangelism: Articulate Harness's security capabilities and controls clearly to enterprise customers and regulatory auditors
Responsibilities
- GRC Engineering & Automation: Develop and implement automation solutions to scale compliance tasks, automate control testing, integrate continuous compliance checks into the CI/CD pipeline, and streamline reporting.
- Customer Trust & Advisory: Support customer trust initiatives by reviewing contracts for security and privacy requirements, completing detailed customer security questionnaires, and maintaining the customer trust portal.
- Contribute precise and actionable guidance to ensure security and privacy by design for engineering, product, and business initiatives.
- Manage relationships and facilitate engagement with external suppliers, auditors, assessors, and enterprise prospects.
- Identify, track, and mitigate risks related to compliance projects, continuously monitor supply chain security, and manage vendor risk.
- A Staff Security Analyst will be a critical member of the GRC team working within the Information Security organization and across the business to advise, build, and operate security and compliance programs at scale.
- As a Staff Security Analyst, you will lead security efforts to acquire and maintain crucial compliance certifications across Commercial sectors while assisting with Federal initiatives.
- You will design solutions that enable Harness' security goals and collaborate directly with business and engineering teams to preserve velocity while ensuring top-tier security.
- Cross-Functional Collaboration: Contribute precise and actionable guidance to ensure security and privacy by design for engineering, product, and business initiatives.
- Stakeholder Engagement: Manage relationships and facilitate engagement with external suppliers, auditors, assessors, and enterprise prospects.
Requirements
- Utilizing in-depth expertise across multiple disciplines, you will be responsible for executing various components of Harness' security posture and overseeing end-to-end solutions to complex compliance problems.
- You have a minimum of 8-10 years of relevant industry experience in security, compliance, and GRC program management.
- Previous experience with GRC tools and a demonstrated ability to build automation for security and compliance controls in a cloud-native environment (AWS, GCP, or Azure).
- You possess strong cybersecurity acumen and solid technical proficiency with enterprise SaaS applications and infrastructure.
- You have exposure to or experience with Kubernetes, SBOMs, SLSA, and/or DLP.
Skills
- Extensive exposure to commercial industry regulations, frameworks, and compliance certifications (ISO 27001, SOC 1, SOC 2, PCI-DSS, HIPAA).
Compensation
- $150,000 - $164,000 USD
- Competitive salary
- Monthly, quarterly, and annual social and team building events
Benefits
- Comprehensive healthcare benefits
- Flexible Spending Account (FSA)
- Flexible work schedule
- Flexible Time Off and Parental Leave
- Monthly internet reimbursement
Company info
- With a global team across 26 offices and 27 countries, Harness is shaping the future of AI software delivery - and we're looking for exceptional talent to help us move even faster.
- At Harness, we care about your privacy and are committed to protecting your personal data.
- Accelerating Our Mission to Bring AI to Everything After Code
This listing is sourced directly from Harness's careers page and normalized into a canonical job model.