Senior Information Security Compliance Analyst

• Lead technical security assessments and integration of acquired companies, mapping their security architectures and controls to our GRC frameworks, identifying gaps, and building remediation roadmaps that address both technical security and compliance alignment
• Bridge technical security and business stakeholders by evaluating risks through a technical lens, working alongside security engineering teams to translate GRC requirements into practical security measures, and communicating effectively across technical and non-technical audiences
• Develop and harmonize security policies and control frameworks across acquired entities, ensuring they're both audit ready and operationally sound, while translating between technical security requirements and governance documentation
• Own customer security questionnaire responses by leveraging your hands-on security background to provide detailed, accurate answers and collaborating with infrastructure, application security, and operations teams to gather technical evidence
• Drive continuous improvement of our GRC program through technical security enhancements, meaningful security and compliance metrics, and process improvements that increase both control effectiveness and operational efficiency

• Hands-on experience in technical security roles such as Security Operations, Incident Response, Security Analysis, penetration testing, or similar
• Practical knowledge of security tools, SIEM platforms, vulnerability management, and security monitoring
• and ability to read and understand security logs, configurations, and technical documentation
• 6+ years of total experience with significant time in GRC
• Working knowledge of ISO 27001, NIST frameworks, SOC 1/2, and GDPR requirements
• Experience developing and implementing information security policies and controls
• ISO 27001:2022 Lead Implementer and Lead Auditor certification

CISSP, CISM, CISA, or CRISC certifications desirable

• health and welfare benefits
• tuition assistance
• 401K savings and other retirement programs
• employee assistance programs