Senior Information Security & Compliance Analyst
Core
Strengthen and evolve information security, risk management, and compliance programs within a growing technology environment to protect business operations, infrastructure, and customer data.
Role type
Senior Information Security & Compliance Analyst
Builds
Scalable security practices, audit-ready compliance frameworks, and risk management controls
Domain
Technology / Information Security / Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
Security controls design, Risk assessment, Audit coordination, Compliance framework implementation, Policy development, Third-party risk management, Cloud security principles, Compliance automation, Vulnerability management, Remediation planning
Preferred skills
FedRAMP experience, CISSP/CISM/CISA/CCSP/CGRC certifications
Technologies
Vanta, AWS, SOC 2, PCI DSS, ISO 27001, NIST
Responsibilities
Support and enhance security and compliance programs including SOC 2, PCI DSS, and other frameworks; Translate regulatory obligations into practical controls and remediation plans; Develop and update security policies, risk assessments, and compliance documentation; Coordinate security audits, evidence collection, and remediation activities; Collaborate with internal stakeholders and external assessors; Identify, assess, and monitor security risks and track corrective actions; Support customer security reviews and third-party risk management; Leverage compliance automation platforms to streamline evidence collection and reporting; Partner with technical teams to implement and assess security controls.
Seniority
Senior, hands-on IC
