Senior Compliance Analyst

Role Overview

The company is seeking a Senior Compliance Analyst to support the ongoing management and maturity of its compliance program. You will ensure alignment with regulatory requirements, industry frameworks, and contractual obligations for cloud-based (SaaS) services.

Responsibilities

• Evaluate and assess IT General Controls (ITGCs), security controls, and compliance processes for regulatory, contractual, and organizational alignment.
• Partner with Security, Cloud Operations, Engineering, Product, and Legal to implement and maintain compliance requirements in cloud-hosted environments.
• Review customer contract terms covering cybersecurity, privacy, artificial intelligence, audit rights, and regulatory compliance.
• Support customer due diligence by completing questionnaires and security/compliance information requests.
• Assist with external audits and certifications, including: SOC 1, SOC 2, ISO 27001, FedRAMP, and other applicable frameworks.
• Perform compliance assessments, risk analyses, and control reviews; identify gaps and recommend remediation.
• Develop and maintain compliance policies, standards, procedures, and control documentation.
• Monitor changes in regulations, cybersecurity threats, cloud technologies, and industry best practices to continuously improve the program.
• Serve as a trusted advisor on compliance across the organization.

Requirements

• Bachelor’s degree and 5+ years of experience in IT audit, cybersecurity, information security, cloud compliance, risk management, regulatory compliance, or related fields.
• Strong knowledge of ITGCs, cloud security principles, shared responsibility models, and cloud infrastructure architectures.
• Experience supporting audits/assessments for frameworks such as SOC 1, SOC 2, ISO 27001, NIST 800-53, FedRAMP, GDPR, or similar.
• Excellent written and verbal communication skills, able to explain complex concepts to technical and non-technical stakeholders.

Preferred Qualifications

• Experience with SaaS, cloud-native, or enterprise software environments.
• Experience interpreting security, privacy, AI, and compliance requirements in customer contracts and legal agreements.
• Familiarity with Microsoft Azure.
• Relevant certifications such as CISA, CISSP, CISM, CRISC, or CCSP.

Skills & Attributes

• Self-starter, results driven; strong prioritization and multitasking.
• Flexible and adaptable; comfortable working independently and in a team.
• Professional, approachable, and able to communicate with all levels of management.