Senior Compliance and Audit Analyst
New
J
JobgetherCybersecurity compliance
Based in the United StatesFull-TimeSenior
SalaryEstimated base salary range of $95,100–$146,300
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 6 years of relevant experience
- Required Skills
- Microsoft OfficeServiceNow
Requirements
- Hold a bachelor's degree in Information Systems, Cybersecurity, Risk Management, or a related discipline, or have equivalent professional experience.
- Have at least 6 years of relevant experience in information security, compliance, customer assurance, third-party risk management, audit support, contract support, vendor management, or a related field.
- Be familiar with ISO 27001, NIST SP 800-171, GDPR, and SOC 2.
- Have experience responding to customer security inquiries, due diligence requests, security questionnaires, and security-related RFP/RFI requirements.
- Understand security-related contractual provisions, including information security obligations, audit rights, incident notification, data protection, privacy, third-party requirements, and regulatory compliance.
- Be able to interpret policies, security standards, procedures, contractual language, vendor documentation, customer requirements, and audit reports.
- Have strong written communication skills to translate complex security and compliance information into clear, accurate responses.
- Be able to identify inconsistencies, missing information, unclear requirements, control gaps, and potential compliance risks.
- Have analytical and problem-solving abilities for assessing security requirements and risk-related documentation.
- Be able to manage multiple requests, competing priorities, and deadlines.
- Be proficient in Microsoft Office and familiar with knowledge management systems, ServiceNow, and collaboration tools.
- Candidates must be authorized to work in the United States without requiring employment-based visa sponsorship now or in the future.
Responsibilities
- Manage customer security inquiries, due diligence requests, security questionnaires, and security-related RFP and RFI sections.
- Track and coordinate customer requests, audit evidence submissions, contractual reviews, and third-party risk assessments through ServiceNow or other approved workflow platforms.
- Collaborate with Information Security, Legal, Privacy, Procurement, Sales, Product, and technical stakeholders to validate security information.
- Prepare customer-appropriate responses covering security controls, policies, frameworks, certifications, audit reports, privacy practices, and risk management.
- Review customer and vendor contracts for security, data protection, privacy, audit rights, incident notification, and compliance provisions.
- Assess customer and supplier security requirements against internal policies, standards, control capabilities, and approved risk positions.
- Coordinate audit evidence requests and ensure externally shared documentation is accurate, current, approved, and authorized for disclosure.
- Support vendor and supplier due diligence, security assessments, periodic reviews, renewals, and ongoing monitoring.
- Maintain third-party assessment records, Trust Center resources, standardized response libraries, and internal knowledge resources.
- Monitor request volumes, turnaround times, recurring issues, documentation gaps, and process inefficiencies; recommend improvements.
View Full Description & ApplyYou'll be redirected to the employer's site
