Senior Compliance Analyst

Accountabilities Evaluate IT General Controls (ITGCs), security controls, and compliance processes to ensure alignment with regulatory, contractual, and organizational requirements.

Partner with security, engineering, cloud operations, product, legal, and other internal teams to implement and maintain compliance controls across cloud-hosted environments.

Review customer agreements and contractual requirements related to cybersecurity, privacy, artificial intelligence, audit rights, and regulatory compliance.

Support customer and prospect due diligence activities by completing security questionnaires, compliance assessments, and responding to requests for compliance-related information.

Assist with external audits and certification initiatives, including frameworks such as SOC 1, SOC 2, ISO 27001, FedRAMP, and other applicable standards.

Conduct compliance assessments, risk analyses, and control reviews, identifying gaps and recommending remediation strategies to strengthen the compliance program.

Develop, maintain, and improve compliance policies, standards, procedures, and supporting documentation.

Monitor changes in cybersecurity regulations, cloud technologies, and industry best practices, providing guidance and recommendations to support ongoing program maturity.

Serve as a trusted advisor on information security, governance, risk, and compliance matters across the organization.

Requirements

Bachelor's degree and at least 5 years of experience in IT audit, cybersecurity, information security, cloud compliance, risk management, regulatory compliance, or a related field.

Strong knowledge of IT General Controls (ITGCs), cloud security principles, shared responsibility models, and cloud infrastructure environments.

Experience supporting compliance programs, audits, and regulatory assessments involving frameworks such as SOC 1, SOC 2, ISO 27001, NIST 800-53, FedRAMP, GDPR, or similar standards.

Experience reviewing customer contracts and interpreting security, privacy, artificial intelligence, and compliance requirements is highly desirable.

Familiarity with SaaS platforms, cloud-native technologies, enterprise software environments, and Microsoft Azure is preferred.

Relevant industry certifications such as CISA, CISSP, CISM, CRISC, CCSP, or equivalent are considered an asset.

Excellent written and verbal communication skills with the ability to explain technical and compliance concepts to both technical and non-technical audiences.

Strong analytical, organizational, and problem-solving skills with the ability to prioritize multiple initiatives effectively.

Self-motivated, adaptable, collaborative, and comfortable working independently while partnering with stakeholders across all levels of the organization.

Benefits

Competitive annual base salary ranging from $99,000 to $128,500 USD , with additional variable compensation opportunities based on experience, skills, and location.

Fully remote work within the United States.

Comprehensive medical insurance.

Dental and vision coverage.

Life insurance.

Short-term and long-term disability insurance.

401(k) retirement plan.

Paid vacation.

Paid company holidays.

Professional development and ongoing training opportunities.

Collaborative and supportive work environment with opportunities to contribute to a growing compliance program.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1