Security & Compliance Analyst II - Remote

Overview

As a Security & Compliance Analyst II at Headspace, you will help lead the charge in refining our risk & security programs, driving compliance excellence, and ensuring our product, applications, and infrastructure are secured to improve Headspace’s overall security posture.

In Short

• Own and provide oversight of programs across security, risk, compliance, and privacy.
• Lead day-to-day coordination of external audits, including HITRUST and SOC 2.
• Triage, track, and respond to B2B customer security questionnaires.
• Maintain and monitor the vendor risk management program.
• Collaborate with Product, Engineering, Legal, and IT teams on security reviews.
• Maintain security policies and procedures aligned with audit frameworks.
• Support continuous improvement initiatives across GRC tooling.

Requirements

• 3+ years of experience in a security, compliance, privacy, or risk-related role.
• Bachelor’s degree in a related field or equivalent practical experience.
• Foundational understanding of security, privacy, and compliance frameworks.
• Strong organizational and project management skills.
• Excellent written and verbal communication skills.
• Comfortable working with SaaS tools such as Jira and Confluence.
• Curiosity and initiative in learning security and risk concepts.

Benefits

• Base salary range of $100,800 - $161,000 plus equity and benefits.
• Comprehensive healthcare coverage.
• Monthly wellness stipend.
• Retirement savings match.
• Generous parental leave.
• Lifetime Headspace membership.