Senior Information Security – Compliance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the ongoing enhancement of information security, risk, and compliance initiatives, including SOC 2, PCI DSS, and other relevant frameworks.

• Convert regulatory, security, and customer demands into actionable controls, processes, and remediation strategies.

• Oversee the maintenance of security policies, standards, risk assessments, and related compliance documentation.

• Organize security audits, assessments, evidence gathering, and remediation efforts.

• Collaborate with internal teams and external evaluators to ensure audit preparedness and continual compliance.

• Recognize and monitor security risks, track corrective measures, and relay findings and suggestions.

• Assist in customer security evaluations, due diligence processes, and third-party risk management tasks.

• Utilize compliance automation tools to enhance the efficiency of evidence collection, control monitoring, and reporting.

• Discover opportunities to fortify security processes, boost efficiency, and minimize manual compliance tasks.

• Work alongside technical teams to implement robust security controls and continuously assess their effectiveness.

⛳️ Requirements

• A minimum of 5 years of progressive experience in information security, governance, risk, compliance, or security assurance.

• Proven experience in supporting or managing complex security and compliance programs such as SOC 2, PCI DSS, ISO 27001, or NIST-based frameworks.

• Strong knowledge of security controls, risk management, audit processes, vulnerability management, and remediation strategies.

• Experience in coordinating audits, managing compliance evidence, and engaging with both technical and non-technical stakeholders.

• Familiarity with AWS, cloud security principles, and modern SaaS environments.

• Experience with Vanta or similar compliance automation tools.

• Excellent organizational, analytical, and communication skills, with the capability to manage competing priorities and propel initiatives forward.

• Experience with FedRAMP or other U.S. federal security standards is a significant advantage.

• Relevant certifications such as CISSP, CISM, CISA, CCSP, or CGRC are beneficial.

🏝️ Benefits

• Flexible work environment.

• Opportunity to collaborate and advance your career with a creative, diverse, and passionate team.