Want to know if this job is worth applying to?
United States
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Information Security & Compliance Analyst based in the United States.
As a Senior Information Security & Compliance Analyst, you will play a key role in strengthening and evolving information security, risk management, and compliance programs within a growing technology environment. You will help establish scalable security practices that protect business operations, technology infrastructure, and customer data. Working closely with IT Operations, Architecture, Engineering, and cross-functional teams, you will translate complex regulatory and security requirements into practical solutions. You will also drive audit readiness, oversee risk assessments, and support compliance initiatives across multiple frameworks. This role offers the opportunity to influence security strategy, improve operational efficiency through automation, and support expansion into highly regulated markets. You will thrive in a hands-on environment that values ownership, sound judgment, and continuous improvement.
As Senior Information Security & Compliance Analyst, you will help develop, maintain, and continuously improve security and compliance practices while ensuring alignment with industry standards and business requirements. Your responsibilities will include:
Support and enhance information security, risk management, and compliance programs, including SOC 2, PCI DSS, and other relevant frameworks.
Translate regulatory obligations, security standards, and customer requirements into practical controls, procedures, and remediation plans.
Develop, maintain, and update security policies, standards, risk assessments, and compliance documentation.
Coordinate security audits, assessments, evidence collection, and remediation activities to maintain audit readiness.
Collaborate with internal stakeholders and external assessors throughout audit and assurance processes.
Identify, assess, and monitor security risks, track corrective actions, and communicate findings and recommendations.
Support customer security reviews, due diligence processes, and third-party risk management activities.
Leverage compliance automation platforms to streamline evidence collection, control monitoring, and reporting.
Identify opportunities to improve security processes, reduce manual compliance activities, and strengthen operational efficiency.
Partner with technical teams to implement appropriate security controls and continuously assess their effectiveness.
Contribute to the development of sustainable security and compliance practices that support business growth and entry into highly regulated environments.
Requirements:
The ideal candidate brings substantial experience in information security, governance, risk, and compliance, along with strong analytical skills and the ability to turn complex requirements into actionable solutions. You should be comfortable working across technical and business teams, managing multiple priorities, and taking ownership of security initiatives. Key qualifications include:
At least 5 years of progressive experience in information security, governance, risk management, compliance, or security assurance.
Demonstrated experience supporting or managing complex security and compliance programs involving SOC 2, PCI DSS, ISO 27001, or NIST-based frameworks.
Strong understanding of security controls, risk management methodologies, audit processes, vulnerability management, and remediation practices.
Experience coordinating audits, managing compliance evidence, and collaborating with both technical and non-technical stakeholders.
Familiarity with AWS, cloud security principles, and modern SaaS environments.
Experience using Vanta or similar compliance automation platforms.
Excellent organizational, analytical, and problem-solving skills.
Strong written and verbal communication skills, with the ability to explain complex security requirements clearly.
Ability to manage competing priorities, work independently, and drive initiatives through to completion.
Experience with FedRAMP or other U.S. federal security requirements is a strong advantage.
Relevant professional certifications such as CISSP, CISM, CISA, CCSP, or CGRC are considered an asset.
Benefits:
Fully remote working arrangement within the United States.
Flexible working environment designed to support work-life balance.
Opportunities for professional growth and career development.
Collaboration with a creative, diverse, and passionate team of technology professionals.
Opportunity to contribute to innovative AI, machine learning, and digital automation solutions.
Inclusive workplace committed to equal employment opportunities.
Reasonable accommodations available throughout the recruitment and employment process.
