Asana
Security Compliance Lead, FedRAMP
San Francisco · Senior
Sponsorship not specified$158k-$180kDetected 20 days ago
CybersecurityComplianceRecruitingCollaborationMentoringPlain Language
Stay score
odds of building a lasting career here
61Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Context, not a finding about this posting: of this employer's 20 green-card filings in this occupation, 100% were for a worker who already held the job.
Green-card follow-through: 82%
Of 17 labor certifications old enough to have been used, 3 expired without the employer filing the next step. Median time from filing to decision: 486 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.
Files H-1B transfers
8 transfer filings in the last year, covering 8 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- This is an excellent opportunity for someone with early-career GRC experience who has a strong grounding in FedRAMP and is excited to grow their technical skills in a high-growth SaaS environment.
- This role is based in our San Francisco office with an office-centric hybrid schedule.
- The standard in-office days are Monday, Tuesday, and Thursday.
Responsibilities
- Own the monthly FedRAMP ConMon package submission, ensuring it is accurate, complete, and delivered on time every month.
- Track and drive completion of all timebound FedRAMP requirements by working closely with Engineering, People, and other responsible teams.
- Maintain a clear calendar of FedRAMP deliverables and proactively flag risks to timelines, escalating where needed to ensure nothing slips.
- Proactively engage with a wide range of teams-including Engineering, IT, and People-to work through FedRAMP controls maturity activities, close existing gaps, and drive remediation efforts to completion with clear documentation of progress.
- Support external compliance audits end-to-end: coordinating evidence requests, liaising with auditors, and tracking findings through to closure.
- Build strong working relationships across the business so that control owners feel supported and accountability is shared, not siloed within the compliance team.
- Own evidence collection workflows within our GRC platform, ensuring controls are reliably mapped, evidence is current, and audit artefacts are ready year-round-with particular attention to FedRAMP requirements.
- Comfortable engaging with a wide variety of teams-Engineering, People, IT, Legal-to explain compliance requirements, gather evidence, and build the relationships needed to close control gaps.
- Career coaching & support
Requirements
- 5+ years of experience in Governance, Risk, and Compliance (GRC), information security, or a closely related field-internships and co-ops count.
Nice to have
- Hands-on experience with FedRAMP-ideally including ConMon, evidence collection, or working within a FedRAMP Moderate or High boundary.
- This is the most important qualification for this role.
Skills
- Contribute to controls maturity scoring and reporting, providing ongoing visibility into programme health for senior leadership.
Compensation
- Our comprehensive compensation package plays a big part in how we recognize you for the impact you have on our path to achieving our mission.
Benefits
- Curious about how modern SaaS engineering works-comfortable asking questions and learning the technical context behind a control.
- Mental health, wellness & fitness benefits
- Inclusive family building benefits
- Long-term savings or retirement plans
Company info
- Asana is a leading platform for human + AI collaboration.
- Millions of teams around the world rely on Asana to achieve their most important goals, faster.
- Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation.
- We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly.
- With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong.
- We believe in supporting people to do their best work and thrive.
- Our goal is to ensure that Asana upholds an environment where all people feel that they are respected and valued, whether they are applying for an open position or working at the company.
- Join Asana's Talent Network to stay up to date on job opportunities and life at Asana.
- We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law.
This listing is sourced directly from Asana's careers page and normalized into a canonical job model.