F

Field Nation

On-demand marketplace connecting US freelance technicians

Senior Information Security Analyst - GRC

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeDhaka, Bangladesh

About the Job

Requirements

  • A bachelor's degree in Cybersecurity, Information Systems, Computer Engineering, or a related discipline, or equivalent experience.
  • At least 5 years of work experience in Governance, Risk, and Compliance roles or adjacent roles.
  • A strong background in auditing or securing AWS cloud environments and SaaS technologies such as GitHub and Salesforce.
  • Technical expertise designing, implementing, validating, and scaling security controls and programs addressing SOC 2 and ISO 27001 requirements.
  • Expert understanding of SOC 2, ISO, and other security compliance frameworks.
  • Technical proficiency in Python or similar scripting languages, Terraform or other infrastructure-as-code, or hands-on experience designing, building, and consuming APIs.
  • Experience with GRC automation platforms such as Vanta or Drata, including configuration, integration design, and workflow automation.
  • Hands-on experience conducting security risk assessments using structured methodologies such as NIST RMF or FAIR, and translating findings into prioritized remediation plans.
  • Ability to drive cross-functional alignment across engineering, product, legal, and executive teams without direct authority.
  • Ability to communicate technical security risk to engineers, executives, and employees, and to coach and share knowledge.

Responsibilities

  • Own security compliance programs, including SOC 2 and ISO 27001, from control design through remediation tracking and auditor coordination.
  • Serve as the GRC point of contact for staff, customers, prospects, and auditors.
  • Replace manual compliance workflows with automated evidence collection pipelines, control monitoring, and reporting systems.
  • Design and operate the vendor risk management program, including assessment methodology, risk tiering, and ongoing monitoring using automation or AI.
  • Translate compliance framework requirements into tailored technical specifications for engineering teams.
  • Identify and implement opportunities to use AI and LLM tooling for GRC workflows, including security questionnaire responses, evidence analysis, policy drafting, and control gap detection.
  • Monitor emerging AI regulations and governance frameworks, and assess their impact on compliance obligations and the product roadmap.
  • Conduct risk assessments using structured methodologies, maintain the risk register, and work with control owners to prioritize risk-based remediation.

About the Company

Field Nation

On-demand marketplace connecting US freelance technicians

Field Nation is a marketplace that connects businesses with skilled freelance technicians to complete on-demand work orders, mainly in the United States. Companies post work orders and pre-vetted field technicians bid on and complete them; Field Nation earns a fee based on the transaction value. The platform works by letting businesses search for technicians by location, project needs, and specific skills, then manage and track work orders through profiles, team building, and outcomes. What sets Field Nation apart is its large, vetted network and a high track record, with about 1.4 million work orders completed annually and a 98% success rate, driven by a rigorous vetting process and tools that help companies build trusted, consistent field teams. The company's goal is to help businesses run field operations more efficiently and cost-effectively by providing flexible labor and access to qualified, on-demand talent.

Company size
1,001-5,000
Company stage
Early VC
Total funding
$60.2M
Headquarters
Minneapolis, MN
Founded
2008

Recently Posted Jobs

Explore more opportunities at Field Nation

See more jobs