Information Security Analyst
BDT 150,000 – BDT 210,000 / mth base salary
Posted 8 Apr 2026
Advertised as “Senior Information Security Analyst, GRC”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 5+ yrs
- Management level
- Individual contributor
- Employment
- Hybrid
- Contract
- Full-time
| Base salary | BDT 150,000 – BDT 210,000 / mth |
|---|
Field of studyComputer Engineering, Cybersecurity, Information Systems (or related)
Study levelBachelor's
Who we are:
Field Nation brings companies and service professionals together through an integrated, easy-to-use platform. We support businesses looking to grow their service offerings while also empowering technicians to leverage their skills on their own terms. Our mission is to help the service delivery industry do great work, and we live that mission by doing great work for the companies and service professionals that depend on us. Why is this role important to Field Nation?
The Information Security team works across Field Nation to implement, monitor, and continuously improve Field Nation's security, risk, and compliance programs. As a Senior Information Security Analyst in Governance, Risk, and Compliance (GRC), you will lead and scale Field Nation's compliance program (SOC 2, ISO 27001, etc.). This role will own compliance operations, build automated evidence collection and control monitoring systems, and design risk management processes that keep pace with the business. The role requires a technical GRC professional who partners directly with engineering, product, and business teams to embed security into how Field Nation builds and ships software. This role will also help in identifying and building AI tooling to accelerate GRC workflows.
What you’ll do:
-
Own Field Nation’s security compliance programs (SOC 2 & ISO27001) end to end, from control design through remediation tracking and auditor coordination.
-
Serve as the GRC point of contact for Field Nation staff, customers, prospects, and auditors.
-
Replace manual compliance workflows with automated evidence collection pipelines, control monitoring, and reporting systems.
-
Design and operate the vendor risk management program, including assessment methodology, risk tiering, and ongoing monitoring through the use of automation and/or AI.
-
Translate compliance framework requirements into tailored technical specifications that engineering teams can implement without friction.
-
Identify and implement opportunities to use AI and LLM tooling to accelerate GRC workflows, including security questionnaire responses, evidence analysis, policy drafting, and control gap detection.
-
Monitor emerging AI regulations and governance frameworks, and assess their impact on the company's compliance obligations and product roadmap.
-
Conduct risk assessments using structured methodologies, maintain the risk register, and work with control owners to prioritize remediation based risk.