Loading...
SeniorFull-timeTypeScriptNext.jsAWSKubernetesTerraformPostgreSQLCI/CDGitAI
Salary Range
$132,600 - $179,400 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a Technical Business Analyst to bridge the gap between product strategy and engineering execution at Light, a company that replaces factory-era ERPs with modern software.
Key Responsibilities
- →Run SOC 1, SOC 2 (Type I & II), and PCI DSS compliance programs
- →Plan and manage audits, timelines, and auditor relationships
- →Own evidence collection, review, and submission
- →Track audit findings and ensure remediation is delivered with engineering
- →Work with DevSecOps to ensure controls are implemented in IAM, CI/CD pipelines, infrastructure as code, logging, monitoring, and alerting
- →Maintain and update security and compliance policies and procedures
- →Own risk registers, exceptions, and compensating controls
- →Support customer security questionnaires and vendor due diligence
- →Document controls clearly for auditors, customers, and internal teams
- →Partner with the Head of Engineering on compliance priorities and roadmap
Requirements
- ✓4–7 years’ experience in compliance, risk, or security roles
- ✓Hands-on ownership of SOC 1, SOC 2, and/or PCI DSS audits
- ✓Experience working directly with engineering or DevSecOps teams
- ✓Working knowledge of cloud infrastructure and software delivery
- ✓Experience managing evidence, audit requests, and remediation tracking
- ✓Strong written and verbal communication skills
- ✓High attention to detail and ability to manage multiple deadlines
Benefits
- ★Competitive salary + potential stock options
- ★25 days of annual leave + public holidays
- ★Regular socials and company Starsite off-sites
- ★A huge opportunity for career growth as you will help shape a market-defining product
