Senior Information Security Compliance Analyst
Core
Senior Information Security Compliance Analyst responsible for maintaining regulatory and internal security compliance, managing risk assessments, and supporting audit activities.
Role type
Senior IC information security compliance analyst
Builds
Compliance programs, risk registers, audit evidence, and security policy frameworks
Domain
Information Security / Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Regulatory compliance frameworks (GDPR, NIS2, CCPA/CPRA, ISO 27001, SOC 2, NIST CSF, PCI DSS), risk assessment methodologies, audit preparation and remediation, GRC platform usage, cloud security, third-party risk management, incident response planning, business continuity planning, threat modeling, penetration testing coordination
Preferred skills
EU and UK compliance regulations familiarity, AI tools for compliance support
Technologies
GRC platforms, cloud security tools, penetration testing tools
Responsibilities
Maintain information security policies and standards; participate in risk assessments and manage risk exceptions; support internal and external audits; track regulatory changes and recommend program improvements; maintain security operations documents (IRP, runbooks, BCP); coordinate penetration testing results; update organizational Risk Register
Seniority
Senior, hands-on IC
