Senior Security & Compliance Analyst

The Senior Security & Compliance Analyst at Headspace is responsible for ensuring security capabilities and compliance within the company's technology stack, working closely with various teams to mitigate risks and meet security standards.

Location: Remote (US, specifically Los Angeles, CA area)

Salary: $122,400 - $195,500 + equity + benefits

Responsibilities

• Interact closely with cybersecurity architects, privacy officer, general counsel, engineering, and product management teams to ensure security controls and compliance.
• Provide detailed responses to security assessment questionnaires for prospects and proposal managers.
• Research, design, advocate, and recommend new security technologies, architectures, and products to meet compliance requirements.
• Serve as the in-depth security and compliance expert within the Headspace health stack.
• Navigate complex environments to retrieve technical evidence for control assurance.
• Guide the risk and compliance team on security-related technical components.
• Conduct security architecture and application reviews to assess risks and foster continuous improvement.
• Support product testing during audits and provide post-audit analysis.

Requirements

• Bachelor’s degree in Computer Engineering, Management Information Systems, Cybersecurity, or related field.
• Two (2) years of experience as a Security Analyst or related role.
• Experience with security compliance frameworks and regulations (ISO 27001/2, PCI-DSS, HIPAA, GDPR, FedRAMP, HITRUST, SOC 1, SOC 2, etc.).
• Knowledge of cloud security concepts (DevSecOps, IaC, CI/CD, SAST, DAST).
• Understanding of secure software development lifecycle and security engineering practices.
• Experience assessing risks with third-party vendors handling PII/PHI.
• Ability to develop and deliver security awareness training.

Benefits

• Base salary, stock awards, healthcare coverage, wellness stipend, retirement savings match, Headspace membership, parental leave, and more.

Additional Information

• Remote role in Los Angeles, CA area, US residents only.
• Salary range is based on location and experience, with details provided during hiring.
• Headspace values diversity, equity, inclusion, and belonging, and is an equal opportunity employer.