Senior Information Security & Compliance Analyst

Support and enhance information security, risk management, and compliance programs, including SOC 2, PCI DSS, and other relevant frameworks.

Translate regulatory obligations, security standards, and customer requirements into practical controls, procedures, and remediation plans.

Develop, maintain, and update security policies, standards, risk assessments, and compliance documentation.

Coordinate security audits, assessments, evidence collection, and remediation activities to maintain audit readiness.

Collaborate with internal stakeholders and external assessors throughout audit and assurance processes.

Identify, assess, and monitor security risks, track corrective actions, and communicate findings and recommendations.

Support customer security reviews, due diligence processes, and third-party risk management activities.

Leverage compliance automation platforms to streamline evidence collection, control monitoring, and reporting.

Identify opportunities to improve security processes, reduce manual compliance activities, and strengthen operational efficiency.

Partner with technical teams to implement appropriate security controls and continuously assess their effectiveness.

Contribute to the development of sustainable security and compliance practices that support business growth and entry into highly regulated environments.

At least 5 years of progressive experience in information security, governance, risk management, compliance, or security assurance.

Demonstrated experience supporting or managing complex security and compliance programs involving SOC 2, PCI DSS, ISO 27001, or NIST-based frameworks.

Strong understanding of security controls, risk management methodologies, audit processes, vulnerability management, and remediation practices.

Experience coordinating audits, managing compliance evidence, and collaborating with both technical and non-technical stakeholders.

Familiarity with AWS, cloud security principles, and modern SaaS environments.

Experience using Vanta or similar compliance automation platforms.

Excellent organizational, analytical, and problem-solving skills.

Strong written and verbal communication skills, with the ability to explain complex security requirements clearly.

Ability to manage competing priorities, work independently, and drive initiatives through to completion.

Experience with FedRAMP or other U.S. federal security requirements is a strong advantage.

Relevant professional certifications such as CISSP, CISM, CISA, CCSP, or CGRC are considered an asset.

Fully remote working arrangement within the United States.

Flexible working environment designed to support work-life balance.

Opportunities for professional growth and career development.

Collaboration with a creative, diverse, and passionate team of technology professionals.

Opportunity to contribute to innovative AI, machine learning, and digital automation solutions.

Inclusive workplace committed to equal employment opportunities.

Reasonable accommodations available throughout the recruitment and employment process.