Security Analyst - Governance, Risk, and Compliance

LaunchDarkly

2h•$129,900 - $210,210

About The Position

LaunchDarkly's Governance, Risk, and Compliance team is hiring a Security Analyst III to facilitate the definition, implementation, and operation of security and privacy programs. The role supports initiatives to assess and reduce company security risks, advise stakeholders, and maintain compliance with frameworks including ISO 27001, SOC 2 Type II, and FedRAMP. The GRC team demonstrates the security of LaunchDarkly’s critical infrastructure to earn customer trust. The Security Analyst reports to the Director of Security and partners closely with stakeholders in Legal, Revenue, and the wider security team. The position also works with product and infrastructure delivery teams on engineering projects related to GRC requirements. LaunchDarkly expects the analyst to identify ways AI can reduce workload and deepen program coverage.

Requirements

Deep cybersecurity, privacy, and risk management knowledge and skill.
Excellent written and verbal communication skills.
Experience working on collaborative projects.
Depth with modern cloud-based SaaS organizations, specifically AWS control environments.
Information security experience at an organization with significant compliance requirements.
Strong familiarity with security standards including SOC 2, ISO 27001, ISO 27701, and FedRAMP, as well as privacy laws including CCPA and GDPR.
Familiarity with collaboration tools such as Confluence, Slack, and GitHub.
Proactive approach to identifying and addressing compliance drift.
Ability to build relationships and communicate with partner teams, providing direct guidance and alternatives when needed.
Interest in understanding how systems work and adapting them for compliance frameworks.
Ability to use AI thoughtfully as part of the team's toolkit.

Nice To Haves

Considerable knowledge of software development and architecture.
CCSP, PCI QSA, CISSP, CISA, or CISM certification.

Responsibilities

Collaborate with stakeholders to design and operate security controls that comprise the LaunchDarkly GRC program.
Use technology to automate compliance activities, such as gathering evidence and verifying controls.
Track the health and maturity of the program using metrics based on quantitative and qualitative data.
Drive progress toward results for GRC-related continuous improvement projects.
Contribute to documentation for security standards, policies, and processes.
Support audits and assessments with internal and external stakeholders.
Work with product and infrastructure delivery teams on engineering projects related to GRC requirements.