Senior Information Security Analyst, GRC

Job description

Field Nation brings companies and service professionals together through an integrated, easy-to-use platform, supporting businesses looking to grow their service offerings while empowering technicians to leverage their skills on their own terms.

The Information Security team works across Field Nation to implement, monitor, and continuously improve its security, risk, and compliance programs. As a Senior Information Security Analyst in Governance, Risk, and Compliance (GRC), you will lead and scale Field Nation's compliance program (SOC 2, ISO 27001, etc.). This role will own compliance operations, build automated evidence collection and control monitoring systems, and design risk management processes that keep pace with the business. The role requires a technical GRC professional who partners directly with engineering, product, and business teams to embed security into how Field Nation builds and ships software, and who will help identify and build AI tooling to accelerate GRC workflows.

Working hours: 1:00 PM - 10:00 PM (BD time), Monday to Friday. Hybrid: 2 days in-office, 3 days remote per week.

Responsibilities

• Own Field Nation's security compliance programs (SOC 2 & ISO 27001) end to end, from control design through remediation tracking and auditor coordination
• Serve as the GRC point of contact for staff, customers, prospects, and auditors
• Replace manual compliance workflows with automated evidence collection pipelines, control monitoring, and reporting systems
• Design and operate the vendor risk management program, including assessment methodology, risk tiering, and ongoing monitoring using automation and/or AI
• Translate compliance framework requirements into technical specifications engineering teams can implement
• Use AI and LLM tooling to accelerate GRC workflows, including security questionnaires, evidence analysis, policy drafting, and control gap detection
• Monitor emerging AI regulations and governance frameworks and assess their impact on compliance obligations and the product roadmap
• Conduct risk assessments using structured methodologies, maintain the risk register, and prioritize remediation with control owners

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, Computer Engineering, or related discipline, or equivalent experience
• Minimum 5 years of work experience in Governance, Risk, and Compliance roles or adjacent
• Strong background auditing or securing AWS cloud environments and SaaS-based tech (GitHub, Salesforce, etc.)
• Technical expertise designing, implementing, validating, and scaling security controls for SOC 2 and ISO 27001
• Expert understanding of SOC 2, ISO, and other security compliance frameworks
• Technical proficiency in Python (or similar), Infrastructure-as-Code (Terraform), or designing, building, and consuming APIs
• Experience with GRC automation platforms (Vanta, Drata, or similar), including configuration and integration design
• Hands-on security risk assessments using structured methodologies (NIST RMF, FAIR, or similar)
• Proven ability to drive cross-functional alignment across engineering, product, legal, and executive teams without direct authority
• Strong written and verbal communicator who translates technical security risk for engineers, executives, and employees

Benefits

• Field Nation LLC performance reward
• Festival bonus
• Referral bonus
• Gratuity
• Leave encashment
• Medical insurance for employee, spouse and children
• Gym membership
• Complimentary lunch/dinner, unlimited tea & coffee
• Transportation
• Mobile data allowance
• Career development budget
• Summer & winter field weeks and quarterly team outing budget
• Maternity, paternity, Hajj/Umrah leave and paid time off

Skills

• AWS
• GRC
• ISO 27001
• Python
• Risk Assessment
• SOC 2
• Terraform
• Vanta