Senior IT Security Compliance Analyst

• Coordinate the full compliance lifecycle, including gap analysis, remediation planning, audit execution, and continuous compliance monitoring.
• Prepare the organization for new and evolving compliance frameworks by coordinating assessments, audits, self-assessments, and evidence collection and review activities.
• Develop, maintain, and review compliance related documentation to support training, awareness, and sustained operational effectiveness.
• Support the Revenue team by answering Security-related questions from customers and prospects.
• Assist with curating content for ongoing Security training requirements, ensuring completion targets are met.
• Collaborate with globally distributed stakeholders across Engineering, IT, Product, HR, Legal, and other business functions to support consistent implementation of compliance requirements.
• Serve as a primary liaison for audit coordination, including facilitating interviews, walkthroughs, and evidence requests.
• Provide guidance and training to internal teams on compliance initiatives and audit readiness.
• Support adherence to Nintex governance, risk, and compliance standards by assisting with the creation, review and updates of information security policies and procedures.
• Ensure compliance activities align with internal guidelines and approved risk management practices.
• Contribute to compliance integration efforts for acquisitions or organizational changes as required.
• Support risk management activities by assisting with security reviews and compliance risk assessments for new initiatives, technologies, and vendors.
• Identify potential compliance and control gaps, document risks, and assist in tracking mitigation activities.
• Escalate identified risks and issues to appropriate stakeholders in a timely manner.

• Bachelor’s degree in Information Security, Information Technology, Risk Management, Business, or a related field, or equivalent practical experience.
• A proven track of at least 5 years working experience with common compliance and assurance frameworks such as SOC 2, ISO/IEC 27001, GDPR, HIPAA, FedRAMP, or similar international regulatory standards.
• Relevant certifications are preferred but not required, including: CISA, CRISC, CISSP, CCSK, ISO 27001 Lead Implementer/Auditor, or related compliance or risk certifications.
• Familiarity with common IT infrastructure, SaaS based cloud services, identity and access management concepts, and security tooling sufficient to assess control design and operational effectiveness (hands‑on administration is not required).

Relevant certifications are preferred but not required, including: CISA, CRISC, CISSP, CCSK, ISO 27001 Lead Implementer/Auditor, or related compliance or risk certifications.

• Global Gratitude and Recharge Days
• Flexible, paid time off policy
• Employee wellness programs and counseling resources
• Meaningful peer recognition and awards
• Paid parental leave
• Invention/patenting assistance
• Community impact, paid volunteer time, and opportunities
• Intercultural learning and celebration
• Multiple tools through which to learn and grow, and an incredible global community