Skip to content
The board
Job
LegalEngineering

Compliance Analyst

Harvey · Security

View original
Pay
$99,200–$181,300/yr
Where
San Francisco
Posted
Jun 3

Some of the world's largest companies and their law firms use Harvey's AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex challenges in less time.

Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else.

In this role, you'll report to the Senior Compliance Manager and serve as a core executor on Harvey's certification and audit portfolio.

What you'd do

  • Own and maintain core compliance documentation — including compliance packages and security assessment reports — keeping them accurate and audit-ready
  • Coordinate evidence collection across Engineering, Infrastructure, and Security for regulated assessments
  • Support third-party assessor engagements end-to-end: scheduling, preparing teams, triaging findings, and drafting responses
  • Conduct gap analyses against applicable frameworks and produce remediation tracking artifacts teams can act on directly
  • Manage continuous monitoring activities including control reviews, change notifications, and incident documentation to maintain compliance status
  • Partner with Engineering and Security to validate control implementations and translate regulatory language into testable technical configurations

What they want

  • 3–5+ years in information security compliance with hands-on exposure to government and industry frameworks in a SaaS or cloud environment
  • Solid working knowledge of applicable government compliance frameworks; ability to map controls to technical implementations and evaluate evidence quality
  • Experience maintaining compliance documentation and tracking remediation activities; familiarity with compliance automation tooling
  • Exceptional attention to detail — able to manage multiple concurrent workstreams and keep documentation aligned with a dynamic cloud environment
  • Clear communicator: able to write crisp control implementation statements and explain compliance requirements to engineering audiences