Related skills
scripting api integrations iso 27001 audit fedramp📋 Description
- Role based in SF with an office-centric hybrid schedule.
- Partner with Security Eng, Legal, Privacy, and R&D to ensure controls and evidence pipelines.
- Mature and operate Asana's compliance program across SOC 2, ISO 27001, FedRAMP.
- Drive automation initiatives to make the compliance program scalable.
- Hands-on GRC role for early-career growth in a high-growth SaaS company.
🎯 Requirements
- 3+ years in Governance, Risk, and Compliance (GRC) or information security; internships count.
- Foundational knowledge of SOC 2, ISO 27001, NIST CSF, or FedRAMP.
- Comfortable engaging with Engineering, People, IT, Legal to gather evidence.
- Organized and deadline-driven; manage multiple workstreams and time-sensitive obligations.
- Clear communicator; translate compliance requirements for tech and non-tech teams.
- Nice-to-have: exposure to automation tooling (GRC platforms, scripting, APIs).
🎁 Benefits
- Mental health, wellness & fitness benefits.
- Career coaching & support.
- Inclusive family building benefits.
- Long-term savings or retirement plans.
- In-office culinary options to cater to dietary preferences.
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to Engineering Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!