The board
Harvey · Security- Pay
- $99,200–$181,300/yr
- Where
- San Francisco
- Posted
- Jun 3
Some of the world's largest companies and their law firms use Harvey's AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex challenges in less time.
Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else.
In this role, you'll report to the Senior Compliance Manager and serve as a core executor on Harvey's certification and audit portfolio.
What you'd do
- Own and maintain core compliance documentation — including compliance packages and security assessment reports — keeping them accurate and audit-ready
- Coordinate evidence collection across Engineering, Infrastructure, and Security for regulated assessments
- Support third-party assessor engagements end-to-end: scheduling, preparing teams, triaging findings, and drafting responses
- Conduct gap analyses against applicable frameworks and produce remediation tracking artifacts teams can act on directly
- Manage continuous monitoring activities including control reviews, change notifications, and incident documentation to maintain compliance status
- Partner with Engineering and Security to validate control implementations and translate regulatory language into testable technical configurations
What they want
- 3–5+ years in information security compliance with hands-on exposure to government and industry frameworks in a SaaS or cloud environment
- Solid working knowledge of applicable government compliance frameworks; ability to map controls to technical implementations and evaluate evidence quality
- Experience maintaining compliance documentation and tracking remediation activities; familiarity with compliance automation tooling
- Exceptional attention to detail — able to manage multiple concurrent workstreams and keep documentation aligned with a dynamic cloud environment
- Clear communicator: able to write crisp control implementation statements and explain compliance requirements to engineering audiences