Why Harvey

Harvey is a secure AI platform for professionals in law, tax, and finance that augments productivity and automates complex workflows. Harvey uses algorithms with reasoning-adept LLMs that have been customized by our expert team of lawyers, engineers and research scientists. We’ve found product market fit and are scaling our team very quickly. Some reasons to join Harvey are:

• Exceptional product market fit: We have partnered with the largest law firms and professional service providers in the world like A&O, PwC, and many others.

• Strategic investors: Raised over $100 million from strategic investors including Sequoia, Kleiner Perkins, and the OpenAI Startup Fund.

• World-class team: Harvey is hiring the best technical and non-technical talent from places like DeepMind, Google Brain, Stripe, FAIR, Tesla Autopilot, Superhuman, and Glean.

• Partnerships: Our engineers and researchers work directly with OpenAI to build the future of generative AI and redefine professional services.

• Performance: $0-20M ARR in the last 12 months.

• Value: Top of market cash and equity compensation.

Role

Some of the word’s largest companies and their law firms use Harvey to make sense of their legal documents and automate legal work. Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else.

You will report to our Head of Security and take ownership of the operational management of the security & trust function. Your initial focus will be customer risk assessments, annual compliance audits and ongoing associated requirements, maintaining internal security documentation, and maintaining external security documentation and sales collateral.

This is a highly cross-functional role, requiring you to work with all parts of the company, including security and product engineers, product managers, GTM, IT, legal, as well as our compliance consultants and auditors.

We use Harvey to auto-generate answers to customer’s security questionnaires and achieve around 98% accuracy with the latest models, so your job will be mostly to check Harvey’s work and finding the 2% cases where the model hallucinates, misunderstands the question, or wasn’t able to answer a new question due to gaps in our internal documentation.

We are in our 3rd cycle of SOC2 and ISO 27001, but our product is constantly evolving and our organization growing, and you will adjust processes accordingly.

Responsibilities

• Manage annual compliance certifications for ISO 27001 and SOC 2 Type 2, by continuously monitoring compliance in Vanta, performing periodic required tasks, and working with our consultants to produce required evidence for our auditors.

• Answer customer’s security questionnaires by leveraging our AI tools, reviewing their output, and optimizing them over time.

• Maintain and improve internal security documentation

• Improve externally-facing security documentation

Qualifications

• 4+ years experience in Security

• 3+ years experience in roles requiring a high degree of project management or similar

• Strong organizational (project management and process design) skills

• Excellent written and verbal communication skills

• Good high-level understanding of a broad range of security topics

• Management skills to manage contractors, vendors, and consultants

Bonus

• Experience with SOC 2 and ISO 27001 is a plus, but not required

• Technical writing experience is a plus

Compensation

In consideration of market analysis and relevant factors, the salary range for this position is set between $200,000 and $280,000. However, adjustments outside of this range may be considered for candidates whose qualifications significantly differ fr