Staff Compliance Analyst

This is a fully remote position, open to applicants in Florida.

📋 Description

• Contribute to and implement the Certification strategy established by the Security Compliance leadership team.

• Sustain current third-party assurance programs while driving the analysis and integration of new programs.

• Collaborate with teams in Sales, Security, and Operations.

• Oversee ServiceNow controls by comprehending their intent and execution.

• Propel organizational changes through effective testing methodologies.

• Analyze complex issues and offer practical solutions and recommendations.

• Drive and evaluate compliance for cloud business systems, control areas, processes, and products.

• Execute activities to assess and monitor compliance with company policies and procedures.

• Facilitate certifier requests and gather information for both external and internal audits.

• Lead both onsite and remote certification as well as customer audits.

• Conduct activities to ensure compliance with Government Cyber Security requirements within the EMEA region.

• Promote security compliance testing across various teams.

• Collaborate with Risk Management to perform security risk assessments.

• Assist customers in understanding ServiceNow’s security and compliance control environment.

• Enhance the Governance, Risk, and Compliance (GRC) tool and processes to fulfill compliance business requirements.

• Utilize AI to scale compliance efforts for future needs.

⛳️ Requirements

• 8+ years of experience in cyber security compliance, security risk management, audit, or a related field along with relevant education.

• Direct and recent experience with at least three compliance programs, including ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX & C5 in Germany, and/or SOC 2.

• Previous experience in the Security and Compliance group at a SaaS/Cloud company or within the Security and Risk practice of a Big Four firm.

• Experience in integrating AI into work processes, decision-making, or problem-solving tasks.

• Relevant professional certifications such as CISSP, CISA, or CISM are highly desirable.

• Proven track record of working on large-scale projects.

• Familiarity with using a GRC system.

• Exceptional report writing skills, capable of preparing compliance reports and associated metrics.

• Strong verbal and written communication abilities.

• Capacity to collaborate effectively with other members of the GRC organization to achieve results.

🏝️ Benefits

• Remote work flexibility.

• Flexible or remote work persona.

• Equal opportunity employment.

• Reasonable accommodations throughout the application process.