Senior Information Security Compliance Analyst
Core
Maintain compliance with regulatory, statutory, and contractual requirements; support assessments, monitoring, and risk management to align security posture with industry frameworks.
Role type
Senior Information Security Compliance Analyst
Builds
Compliance programs, risk registers, audit evidence, and security strategy roadmaps
Domain
Information Security / Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
Regulatory compliance frameworks (GDPR, NIS2, CCPA/CPRA, ISO 27001, SOC 2, NIST CSF, PCI DSS), Risk assessment methodologies, Audit preparation and remediation, GRC platforms, Cloud security, Third-party risk management, AI tools for compliance
Preferred skills
EU and UK compliance regulations, Penetration testing review, Incident Response planning, Business Continuity planning
Technologies
GRC platforms, AI tools
Responsibilities
Maintain information security policies and standards; Participate in risk assessments and manage risk exceptions; Support internal and external audits; Track regulatory changes and recommend program improvements; Coordinate penetration testing results; Maintain the organizational Risk Register
Seniority
Senior, hands-on IC