Responsibilities
- Build the business case and strategic roadmap for compliance investments, articulating ROI, certification sequencing, and market opportunity to leadership
- Lead gap assessments and compliance readiness evaluations across applicable frameworks, producing maturity baselines and prioritized remediation roadmaps
- Select, onboard, and manage third-party assessors and compliance advisors; hold partners accountable to timelines and escalate risks early
- Drive audit readiness — coordinating evidence collection, continuous monitoring, and audit documentation management with Engineering and Security
- Support customer security reviews, RFP responses, and due diligence conversations as the authoritative internal voice on Harvey's compliance posture
- Build and lead a small team: hire, set direction, develop members, and scale program operations as Harvey's footprint grows
Requirements
- 10+ years in information security or compliance
- 5+ years leading compliance programs for commercial SaaS or PaaS
- Deep command of the compliance lifecycle -- scoping, gap analysis, control documentation, assessment coordination, and continuous monitoring
- Proven cross-functional influence at the senior level; able to drive compliance outcomes across Engineering, Product, Legal, and Sales without slowing the business
- Track record selecting and managing third-party assessors and compliance advisory firms
- Experience building and leading small teams in fast-paced environments, with a bias for hiring exceptional people and creating clarity from ambiguity
Nice to Have
- 1–2+ years using AI tools to improve program efficiency (evidence automation, gap analysis, continuous monitoring)
Additional Information
- Applicant Privacy Notice may apply depending on location
- Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law
- Committed to providing reasonable accommodations to applicants with disabilities
