{"id":1237915,"url":"https://alion.io/job/google-technical-security-and-compliance-analyst","title":"Technical Security and Compliance Analyst","company":{"id":82,"name":"Google","domain":"google.com","url":"https://alion.io/company/google","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":null},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ottawa, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":98000,"max_usd":219000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":68},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GCP","optional":false},{"name":"Linux","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Ansible","optional":true},{"name":"Bash","optional":true},{"name":"Kubernetes","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-15T15:09:02Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-09-25T19:05:53Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"About the job\nThe Google Public Sector (GPS) Governance, Risk and Compliance team enables GPS business with public sector customers by supporting compliance across varied compliance regimes. We serve as a trusted advisor to the business by ensuring that public sector risk exposure is transparent and proactively managed. We promote the growth of Google Cloud’s Public Sector business by driving accountability, consistency, efficiency, and governance.\nAs a Security and Compliance Specialist within the Governance, Risk, and Compliance (GRC) team, you will serve as a technical security leader for critical, highly regulated cloud environments. You will ensure the security posture of specialized deployments, bridging the gap between rigorous compliance frameworks and technical validation. In this role, you will lead security assessments, vulnerability analysis, and architectural reviews to support mission-critical infrastructure. You will work closely with engineering, operations, and external partners to navigate complex security requirements and achieve required authorizations.\nGoogle Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.\nIndividual pay is determined by factors including job-related skills, experience, and relevant education or training.Canada: $128000 - $131000 (CAD) + 15% bonus target + equity + benefits\nLearn more about benefits at Google.\nResponsibilities\nLead technical security validation, including vulnerability assessments and penetration testing, for highly regulated cloud and Linux-based environments.\nDrive Security Assessment and Authorization (SA&A) processes to secure Authorities to Operate (ATO) by translating complex security frameworks into actionable technical engineering requirements.\nAutomate routine security tasks and vulnerability management workflows using scripting languages and modern configuration assessment tools.\nPartner with cross-functional teams-including product, engineering, and operations-to guide security architecture, threat modeling, and software supply-chain security.\nAnalyze complex technical security data to deliver clear, actionable mitigation recommendations to both technical and non-technical stakeholders.\nQualifications\nMinimum qualifications:\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, a related technical field, or equivalent practical experience.\n5 years of experience in cybersecurity, security engineering, pen testing, cloud security, or technical vulnerability assessment.\nExperience performing technical security validation, with Linux operating systems, networking concepts, and access controls.\nCandidates must hold or be eligible to obtain a valid Personnel Security Clearance as a condition of employment.\nPreferred qualifications:\nExperience navigating security frameworks and leading Security Assessment and Authorization (SA&A) or Authority to Operate (ATO) processes in defense, government, or highly regulated environments.\nExperience assessing and securing modern infrastructure, including cloud platforms, Kubernetes, containers, and distributed systems.\nExperience with threat modeling (e.g., MITRE ATT&CK), manual pen testing, security assessment tooling, and automating security workflows using Python, Bash, or Ansible.\nKnowledge of software supply-chain security, including Software Bill of Materials (SBOMs), Static Application Security Testing (SAST), and vulnerability management.\nExcellent communication and cross-functional collaboration skills, complemented by industry-recognized security certifications (e.g., CISSP, OSCP, GCIH, or equivalent).","description_format":"text","description_chars":3942,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Government","Streaming & OTT Platforms","Foundation Models","Consumer Internet Groups"],"lifecycle":[{"event":"open","at":"2026-09-25T16:14:42Z"}],"liveness":{"score":71,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.787,"p_room":0.9,"age_days":10,"expected_fill_days":22,"reasons":["conf:6","win:mid","comp:brand"],"computed_at":"2026-09-26T01:20:13Z"},"pay":null,"html_url":"https://alion.io/job/google-technical-security-and-compliance-analyst","json_url":"https://alion.io/job/google-technical-security-and-compliance-analyst.json","meta":{"generated_at":"2026-09-26T01:20:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1301,"day_limit":5000,"remaining_today":3699,"minute_limit":60,"resets_at":"2026-09-27T00:00:00Z"}}}