Security GRC Analyst (Forward Deployed Assurance)

Quick Facts

• Role: Security GRC Analyst (Forward Deployed Assurance)

Description

This role bridges Security & Compliance needs with Engineering implementation by acting as a technical voice and face of Assurance. You will partner with Engineering organizations, Product Security, Legal, and other stakeholders to understand how requirements are implemented in real systems, identify what’s working, and translate insights into practical, scalable governance requirements.

Responsibilities

• Support Assurance–Engineering alignment as a technical liaison so governance requirements are clearly understood and actionable
• Evaluate control implementation across applications, platforms, infrastructure, cloud environments, and engineering workflows
• Create an engineering feedback loop to identify friction and unclear requirements, then feed improvements into standards and governance processes
• Translate regulatory, compliance, and security expectations into engineering-usable technical requirements
• Execute second-line oversight protocols (e.g., attestations, control checks) to monitor, audit, and validate security controls across engineering teams
• Build end-to-end understanding of platforms, architectures, engineering processes, security capabilities, and control implementations
• Assess control and risk exposure during M&As and design an executable activation plan tied to risk models
• Collaborate on emerging security requirements (including AI governance and privacy) and translate them into future controls and engineering expectations
• Track the direction of compliance frameworks and proactively identify implications
• Support enablement and change management through documentation and training
• Participate in control incident reviews and postmortems with root-cause analysis and remediation tracking
• Refine controls with control owners based on operational findings
• Work with engineering security champions to gather feedback, distribute guidance, and support governance adoption
• Support leadership reporting with metrics on control coverage, compliance trends, and risk items
• Represent Assurance requirements in engineering and operational discussions to integrate compliance early in development cycles

Requirements

• U.S. citizenship or Permanent Residency (no visa sponsorship)
• 2–3 years of relevant experience/technical background in security engineering, cloud security, product security, IAM, platform engineering, or IT governance
• Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes
• Experience translating security/risk/regulatory/compliance requirements into technical implementation requirements
• Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar
• Familiarity with emerging technology and regulatory areas such as AI security, AI governance, privacy, and evolving global technology regulations
• Ability to partner effectively with Engineering and stakeholders across Legal, Compliance, Security, and Risk
• Strong communication skills to translate governance expectations into Engineering actionables
• Analytical mindset to evaluate requirements and provide constructive input based on practical constraints

Benefits

• Time off programs
• Medical, dental, vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program