Compliance Analyst II, GRC, Product Line Readiness
About the position Responsibilities • Work closely with product development teams to integrate security and compliance requirements into the product lifecycle. • Conduct real-time readiness assessments of products and features during development, identifying potential compliance risks and providing actionable recommendations. • Define the scope of compliance controls and requirements for new and existing products. • Provide ongoing guidance to product teams on security controls and industry best practices. • Leverage technical expertise to collaborate with the GRC team during audits. • Lead internal and external audits related to product compliance, ensuring documentation and controls are up to date. • Collaborate with cross-functional teams to embed security controls into development and operational processes. • Help develop and deliver training on security and compliance requirements. • Identify assets utilized in services/products that impact compliance and ensure they are documented in the compliance program. • Assist with internal audits, control testing, and external audits. • Work with Engineering teams to identify automation opportunities for manual tasks. Requirements • Minimum of 2-5 years of related professional compliance and controls program experience. • Previous experience in a cloud environment, preferably AWS and/or Azure. • Experience with modern DevOps patterns and practices, with a strong understanding of embedding security controls into these processes. • Advanced level knowledge of controls and control frameworks. • Comfortable working with both deeply technical and non-technical resources. • Highly responsive with the ability to prioritize and track multiple projects and tasks in parallel. • Excellent communication and collaboration skills. Nice-to-haves • Experience working in a large, multi-cloud environment. • Deep understanding of common security compliance frameworks, attestations, and certifications. • Understanding of infrastructure as code and related controls. • Previous experience at a technology or SaaS company in a similar role. • Existing experience with HashiCorp products. • Experience working with OSCAL. Benefits • Competitive salary based on experience and location. • Remote work flexibility. • Opportunities for professional development and training. Apply tot his job