Senior Cybersecurity and Compliance Analyst - Landmark
Core
Senior Cybersecurity and Compliance Analyst protecting software for the global energy industry, embedding security into the SDLC and ensuring regulatory compliance.
Role type
Senior IC cybersecurity and GRC analyst
Builds
Cloud-native SaaS platforms and enterprise on-premises solutions for the E&P industry
Domain
Energy industry, commercial software security, GRC
Required skills
risk assessment, vulnerability management, security control evaluation, compliance framework expertise (ISO 27001, SOC 2, NIST), incident response support, policy maintenance, security awareness training, GRC platform management, stakeholder collaboration
Preferred skills
CISSP/CISA/CISM/Security+/CCSK certifications, cloud security (Azure/AWS), DevSecOps/CI/CD pipeline experience, regulated industry background (energy/finance/healthcare), commercial software security experience
Technologies
ServiceNow GRC, Archer, SAST, DAST, SCA, IaC scanners, Azure, AWS
Responsibilities
Perform ongoing risk assessments and vulnerability reviews across applications and cloud environments; review SAST/DAST/SCA/IaC scan findings and recommend mitigations; support incident response and post-incident reviews; maintain cybersecurity policies and standards; execute control testing for audits; develop and deliver security awareness programs; manage governance exceptions; handle customer security questionnaires and contract reviews; build risk metrics and compliance dashboards
Seniority
Senior, hands-on IC
