Compliance Analyst

The role

You will serve as a core executor on the certification and audit portfolio. You will maintain compliance documentation, coordinate evidence collection, and support third-party assessments.

What you will do

• Own and maintain core compliance documentation including compliance packages and security assessment reports
• Coordinate evidence collection across Engineering, Infrastructure, and Security for regulated assessments
• Support third-party assessor engagements end-to-end
• Conduct gap analyses against applicable frameworks and produce remediation tracking artifacts
• Manage continuous monitoring activities including control reviews, change notifications, and incident documentation
• Partner with Engineering and Security to validate control implementations

Required qualifications

• 3–5+ years in information security compliance with hands-on exposure to government and industry frameworks in a SaaS or cloud environment
• Solid working knowledge of applicable government compliance frameworks
• Ability to map controls to technical implementations and evaluate evidence quality
• Experience maintaining compliance documentation and tracking remediation activities
• Familiarity with compliance automation tooling
• Exceptional attention to detail
• Clear communicator able to write crisp control implementation statements and explain compliance requirements to engineering audiences

About the company

Harvey is transforming how legal and professional services operate by combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise.