Senior Information Security & Compliance Analyst
New
J
JobgetherInformation security compliance
Based in the United StatesFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 5 years of progressive experience in information security, governance, risk management, compliance, or security assurance.
- Required Skills
- AWS
Requirements
- At least 5 years of progressive experience in information security, governance, risk management, compliance, or security assurance.
- Experience supporting or managing security and compliance programs involving SOC 2, PCI DSS, ISO 27001, or NIST-based frameworks.
- Strong understanding of security controls, risk management methodologies, audit processes, vulnerability management, and remediation practices.
- Experience coordinating audits, managing compliance evidence, and working with technical and non-technical stakeholders.
- Familiarity with AWS, cloud security principles, and modern SaaS environments.
- Experience using Vanta or a similar compliance automation platform.
- Strong organizational, analytical, and problem-solving skills.
- Ability to manage competing priorities, work independently, and drive initiatives through completion.
- Experience with FedRAMP or other U.S. federal security requirements is an advantage.
- Certifications such as CISSP, CISM, CISA, CCSP, or CGRC are an asset.
Responsibilities
- Support and enhance information security, risk management, and compliance programs, including SOC 2, PCI DSS, and other relevant frameworks.
- Translate regulatory obligations, security standards, and customer requirements into practical controls, procedures, and remediation plans.
- Develop, maintain, and update security policies, standards, risk assessments, and compliance documentation.
- Coordinate security audits, assessments, evidence collection, and remediation activities to maintain audit readiness.
- Collaborate with internal stakeholders and external assessors throughout audit and assurance processes.
- Identify, assess, and monitor security risks, track corrective actions, and communicate findings and recommendations.
- Support customer security reviews, due diligence processes, and third-party risk management activities.
- Use compliance automation platforms to streamline evidence collection, control monitoring, and reporting.
- Partner with technical teams to implement security controls and continuously assess their effectiveness.
View Full Description & ApplyYou'll be redirected to the employer's site
