Security Compliance Analyst

View full description

Requirements:

• 2+ years of security compliance or IT compliance experience.
• Experience with security compliance frameworks including ISO 27001, SOC 2, and NIST.
• Familiarity with cloud computing/architecture such as AWS.
• Experience in conducting compliance gap assessments and collaborating to remediate issues.
• Experience in leading or supporting external audits.

Responsibilities:

• Maintain existing Security Compliance Certifications and Frameworks (e.g., SOC 2 Type II, ISO 27001).
• Serve as a subject matter authority for compliance standards and collaborate with business and engineering teams.
• Gap assess new tools and environments against existing controls.
• Drive Annual Operational Activities such as Quarterly Privileged User Access Reviews.
• Implement scalable controls and refine the Common Control Framework.
• Configure compliance automation for continuous monitoring.
• Communicate progress, customer concerns, and issue resolutions.