Compliance Analyst New

About the Role:

We are seeking a proactive and detail-oriented Compliance Analyst to be a key contributor to our Information Security compliance and certification programs. This role is responsible for coordinating the execution of various compliance program tasks and projects, supporting control owners, and maintaining continuous readiness for key frameworks, including SOC 2, PCI, SOX ITGC, ISO 27001.

What You'll Do:

Compliance Program Execution & Coordination

• Coordinate tasks and evidence collection for the continuous compliance programs, specifically SOC 2, SOX (ITGCs), PCI, ISO 27001.
• Act as a central point of contact for internal stakeholders (e.g., Engineering, IT, HR) to ensure timely completion of assigned compliance activities and control performance.
• Assist the Compliance and Audit teams by gathering, organizing, and submitting evidence during internal/external audits and internal reviews.
• Conduct initial testing and monitoring to ensure operational effectiveness and adherence to established policies and procedures.

Remediation and Documentation Support

• Support the tracking and follow-up of audit findings and control deficiencies, ensuring remediation owners are held accountable for timely resolution.
• Assist in maintaining and updating compliance documentation, including control matrices, policies, standards, and process narratives.
• Identify opportunities for process automation and improvement within the evidence collection and control monitoring workflows.

Risk Management and Stakeholder Collaboration

• Support the Enterprise Risk Management (ERM) program by facilitating risk interviews, documentation, and follow-up on identified compliance risks.
• Liaise with cross-functional teams to translate compliance requirements into actionable tasks and controls.
• Contribute to regular compliance and risk reporting, assisting in the preparation of materials for management and governance committees.

What We're Looking For:

• Bachelor’s degree in Information Technology or a related field.
• 5+ years of experience in an IT audit or GRC role (Mandatory).
• Strong understanding of IT general controls (ITGCs) and the principles of common security and privacy frameworks (e.g. SOC 2, ISO 27001/ISO 27701, SOX, PCI).
• Excellent organizational and project coordination skills with a strong attention to detail.
• Effective communication skills, capable of interacting clearly with both technical control owners and business stakeholders.
• CISA or similar certification is a plus.