security and compliance analyst

AMER Technology, Inc.

<div>
 
 
 Job Title: Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
 
 
 
 
 Client:
 
 Texas Health and Human Services Commission (HHSC)
 
 
 
 Location:
 
 701 W 51st Street, Austin, TX 78751
 
 
 
 Work Mode:
 
 100% Onsite (Local Candidates Only)
 
 
 
 Position Overview
 
 
 
 The Texas Health and Human Services Commission (HHSC) is seeking an experienced
 
 Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
 
 to support enterprise cybersecurity governance, risk management, and compliance operations.
 
 
 This role is responsible for ensuring that HHSC information systems remain secure, compliant, and audit-ready by supporting:
 
 <ul>
 <li>
 System Security Plan (SSP) development
 </li>
 <li>
 Security Assessments (SA)
 </li>
 <li>
 Risk Assessments (RA)
 </li>
 <li>
 Authorization to Operate (ATO) support
 </li>
 <li>
 Continuous monitoring initiatives
 </li>
 </ul>
 
 The analyst will collaborate closely with:
 
 <ul>
 <li>
 Information Owners (IO)
 </li>
 <li>
 Information Custodians (IC)
 </li>
 <li>
 Technical &amp; Application Teams
 </li>
 <li>
 HHSC CISO Office
 </li>
 </ul>
 
 All activities must align with:
 
 <ul>
 <li>
 
 NIST SP 800-53
 
 </li>
 <li>
 
 NIST Risk Management Framework (RMF)
 
 </li>
 <li>
 
 DIR Security Control Standards
 
 </li>
 <li>
 HHSC cybersecurity policies
 </li>
 </ul>
 
 RSA Archer serves as the system of record for all GRC activities.
 
 
 
 Key Responsibilities
 
 
 
 
 System Security Planning (SSP)
 
 
 <ul>
 <li>
 Develop, maintain, and update System Security Plans for HHSC systems and applications.
 </li>
 <li>
 Gather and validate control implementation evidence.
 </li>
 <li>
 Ensure documentation aligns with NIST, DIR, and HHSC CISO standards.
 </li>
 <li>
 Support lifecycle updates of SSPs for compliance and audit readiness.
 </li>
 </ul>
 
 
</div>

Cybersecurity Risk & Compliance Analyst

Stellar Hunters

<div>We are seeking a detail-oriented and strategically minded Information Security Compliance Analyst to join our security and risk team. The ideal candidate will support the development, implementation, and maintenance of information security compliance programs, frameworks, and controls; ensure alignment with applicable regulatory and contractual requirements; and collaborate with IT, engineering, legal, and business stakeholders to reduce risk and demonstrate compliance. This role requires hands-on compliance experience, strong knowledge of security frameworks and standards, excellent documentation skills, and the ability to communicate technical requirements to non-technical audiences.<h3 class="jobSectionHeader">
Key Responsibilities for Information Security Compliance Analyst</h3><ul><li>
Implement, maintain, and monitor information security compliance programs and control frameworks (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS, HIPAA) to ensure ongoing alignment with regulatory, contractual, and business requirements.</li><li>
Manage and execute internal compliance assessments, risk assessments, and control testing; document findings, track remediation activities, and verify corrective actions.</li><li>
Support third-party security assessments and vendor risk management processes, including intake questionnaires, evidence collection, review of results, and coordination of mitigation plans with vendors and internal stakeholders.</li><li>
Coordinate and support external audits and certification efforts (e.g., SOC 2 audits, ISO certifications, regulatory reviews), serving as a primary point of contact for auditors and external assessors.</li><li>
Develop, maintain, and update security policies, standards, procedures, and control matrices; ensure documentation is current, accessible, and mapped to applicable frameworks and requirements.</li><li>
Collect, analyze, and report compliance metrics and status to security leadership and cross-functional partners; prepare evidence packages and executive-ready reports demonstrating control effectiveness and remediation progress.</li><li>
Collaborate with Information Security, IT operations, engineering, legal, and business teams to interpret compliance requirements, integrate controls into processes and systems, and advise on remediation or compensating controls.</li><li>
Stay informed of changes in privacy, security, and regulatory landscapes; evaluate impacts to the organization and recommend required updates to policies, controls, or compliance programs.</li><li>
Provide training and awareness sessions for employees on security compliance topics, control responsibilities, and evidence collection best practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Risk Management, or related field, or equivalent experience.</li><li>
3+ years of experience in information security compliance, audit, risk management, or related roles within technology-driven or regulated organizations.</li><li>
Practical knowledge of common security frameworks and standards (e.g., SOC 2, ISO 27001, NIST CSF, PCI-DSS) and experience mapping controls to requirements.</li><li>
Experience performing control testing, risk assessments, vendor security reviews, and preparing evidence for audits or certifications.</li><li>
Strong written and verbal communication skills; ability to produce clear policy and procedure documentation and present compliance status to technical and non-technical stakeholders.</li><li>
Familiarity with security and compliance tooling (e.g., GRC platforms, SIEM, vulnerability management, ticketing/ITSM systems) and proficient with Excel or similar data analysis tools.</li><li>
Excellent organizational skills and attention to detail, with the ability to manage multiple priorities, deadlines, and cross-functional projects.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications - Certifications &amp; Tools</h4><ul><li>
Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC, or similar are preferred.</li><li>
Experience supporting SOC 2 or ISO 27001 audits, or leading vendor risk and third-party assessment programs.</li><li>
Familiarity with cloud security controls and compliance in AWS, Azure, or GCP, and experience working with DevOps/engineering teams to embed controls into CI/CD pipelines.</li><li>
Prior experience with GRC platforms (e.g., RSA Archer, ServiceNow GRC, OneTrust, Drata) or automation of compliance evidence collection is a plus.</li></ul><h5 class="jobSectionHeader">
Work Environment &amp; Compensation</h5><ul><li>
Full-time position with an onsite work model.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, continuing education support, and assistance with certification costs.</li><li>
Collaborative and inclusive team culture committed to diversity, equity, and professional growth.</li></ul></div>

Information Security Compliance Analyst

Uber

<div>About the Role
 
 
Uber's Ethics, Compliance, &amp; Security (ECS) organization seeks a highly skilled and self-directed Data Analyst II to advance Uber's ability to assess and mitigate complex global risks through data-driven insights. The position will play a critical role in enabling strategic, risk-informed decision-making to enhance the resilience of Uber's global operations.
 
 
As a member of the ECS Central Programs Data Science &amp; Services (DSS) team, this role will focus on data analysis, visualization, metrics reporting, and business intelligence in support of global security, strategic intelligence, public safety, and compliance risk-related initiatives. The Data Analyst II will partner closely with stakeholders across ECS to translate complex questions into clear, actionable insights through dashboards, recurring reporting, and targeted analysis. In this role, you will own end-to-end analytic products, communicate insights to relevant internal stakeholders, and contribute to high-impact decisions in a fast-paced, global environment.
 
 
What You'll Do:
<ul><li>Perform end-to-end data analysis to support ECS programs related to operational risk, security trends, and global compliance risk monitoring
</li><li>Develop and maintain Tableau visualization dashboards, reports, and core metrics to track trends, risks, and outcomes across ECS initiatives
</li><li>Write and optimize SQL queries to extract, clean, and transform data from multiple internal sources
</li><li>Conduct exploratory and deep-dive analyses to identify patterns, anomalies, and emerging risks
</li><li>Ensure data accuracy, consistency, and documentation across reporting and analytical outputs. Proactively identify and execute on opportunities to improve data quality, reporting processes, dashboard usability, and analytical workflows; to streamline collection and reporting systems
</li><li>Clearly communicate findings through visualizations, written summaries, and presentations tailored to technical and non-technical audiences
</li><li>Partner with ECS stakeholders ( including Security, Investigations, Strategic Analysis, Compliance, Public Safety, and Health &amp; Safety) to translate business questions into analytical approaches and insights
</li><li>Support cross-functional ECS initiatives on demand, acting as data subject matter expert and trusted technical advisor
</li><li>Use industry expertise to see around corners and build analytic products that meet Uber's future as well as current needs
</li></ul>Basic Qualifications:
<ul><li>Bachelor's degree in Data Analytics, Business Analytics, Data Science, Statistics, or a related quantitative field
</li><li>5+ years of professional experience in data analytics, business intelligence, or a related role
</li><li>Strong experience using SQL for data extraction, transformation, and analysis
</li><li>Skilled in building interactive data visualizations using Tableau or similar visualization tools
</li><li>Experience using Python or R for data wrangling, automation, and analysis
</li><li>Experience developing custom KPIs/metrics for recurring business or operational reporting
</li></ul>Preferred Qualifications:
<ul><li>Master's degree in a quantitative analytical field
</li><li>Experience working with large and messy datasets and translating data into actionable insights
</li><li>Strong attention to detail and commitment to data quality and accuracy
</li><li>Clear written and verbal communication skills, with the ability to distill complex data into concise, compelling narratives
</li><li>Subject matter experience in the areas of risk, security, compliance, policy, or public safety
</li><li>Demonstrated success in working closely with a range of partners and stakeholders on complex analytical products
</li><li>Experience with data management, including data quality assurance, permissions management, ETL pipeline automation, and optimization
</li><li>Demonstrated history of initiative, creativity, and continuous improvement; demonstrated breadth of experience in proactively identifying and solving problems through data
</li><li>Experience handling sensitive topics, systems, and information with appropriate discretion
</li><li>Experience working in a fast-paced environment, balancing multiple concurrent projects while being responsive to multiple stakeholders and adapting to new priorities with agility
</li>Excellent written and verbal communication skills to communicate findings to diverse audiences, including translating complex concepts and issues into actionable insights for senior management and non-technical audiences 
<li>
</li></ul> 
 
For Chicago, IL-based roles: The base salary range for this role is USD$122,000 per year - USD$135,500 per year. For Dallas, TX-based roles: The base salary range for this role is USD$122,000 per year - USD$135,500 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award &amp; other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.</div>

Data Analyst II, Ethics, Compliance, & Security

Father Joe's Villages

<div>Cybersecurity Compliance Analyst
Information Technology Department
At Father Joe&rsquo;s Villages, protecting client and organizational data is essential to sustaining trust, compliance, and operational excellence. The Information Technology team safeguards sensitive systems and information across on-premises, cloud, and SaaS environments to ensure the confidentiality, integrity, and availability of data that supports our mission to end homelessness.
The Role
As a Cybersecurity Compliance Analyst, you will strengthen the organization&rsquo;s cybersecurity posture by combining hands-on security operations with structured compliance and risk management practices. You will monitor threats, support incident response, manage vulnerability remediation efforts, and maintain alignment with regulatory requirements including HIPAA, PCI-DSS, and HUD/HMIS standards.
This role is ideal for a technically skilled and detail-oriented professional who is motivated by protecting mission-critical systems while ensuring ongoing compliance in a regulated environment.
 Your Role in Strengthening Security and Compliance<ul><li>
Monitor endpoint, cloud, and SaaS environments for security threats using centralized monitoring and detection tools.</li><li>
Deploy, configure, and maintain endpoint protection and cloud security solutions.</li><li>
Investigate security alerts, anomalous activity, and potential data misuse or exfiltration.</li><li>
Support vulnerability scanning, remediation tracking, and secure configuration practices aligned with CIS and NIST standards.</li><li>
Maintain documentation, policies, procedures, and evidence required for HIPAA, PCI-DSS, and HUD/HMIS compliance.</li><li>
Support internal and external audits, vendor risk assessments, and control validation activities.</li><li>
Participate in incident response activities including detection, containment, recovery, and post-incident analysis.</li><li>
Develop security metrics, reports, and risk summaries for leadership and audit purposes.</li><li>
Identify opportunities to improve security controls, automation, and operational efficiency.</li><li>
Complete required trainings and perform other related duties as assigned.</li></ul>
Desirable Candidate Profile
Minimum Requirements<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or related field, or equivalent combination of education and relevant experience.</li><li>
Minimum of three (3) years of experience in cybersecurity operations, cloud security, compliance-focused security, or related technical roles.</li><li>
Experience supporting regulated or compliance-driven environments (e.g., HIPAA, PCI-DSS, HUD/HMIS, or similar frameworks).</li><li>
Experience working with security tools such as endpoint detection and response (EDR/XDR), SIEM platforms, vulnerability management tools, or cloud security controls.</li></ul>
 Key Competencies and Experience
 Knowledge &amp; Skills<ul><li>
Working knowledge of cybersecurity principles including threat detection, incident response lifecycle practices, and vulnerability management.</li><li>
Familiarity with regulatory frameworks such as HIPAA Security Rule, PCI-DSS, NIST Cybersecurity Framework, or similar standards.</li><li>
Experience with security monitoring tools, log analysis, and documentation of compliance evidence or audit artifacts.</li><li>
Familiarity with cloud security concepts including identity and access management and secure configuration practices.</li><li>
Abilities &amp; Ways of Working</li><li>
Ability to analyze logs, alerts, and technical findings and translate them into clear, prioritized recommendations.</li><li>
Ability to manage multiple priorities in a dynamic environment, including time-sensitive incident response or audit preparation activities.</li><li>
Strong organizational skills and attention to detail when maintaining policies, risk registers, and compliance documentation.</li><li>
Professional Attributes &amp; Behaviors</li><li>
Professional judgment and discretion when handling sensitive security and organizational information.</li><li>
Clear and effective communication with technical teams, leadership, vendors, and auditors.</li></ul>
 Work Schedule
Full-time position, typically Monday through Friday, with flexibility to support incident response, audits, or time-sensitive security matters. Occasional evening or weekend work may be required. This role may be performed in a combination of office and remote settings.
Compensation and Benefits
Pay for this position is based on experience, qualifications, and internal equity. The anticipated starting pay range for this role is $40.52 to $46.56 per hour.
In addition to competitive pay, Father Joe&rsquo;s Villages offers a comprehensive benefits package, including medical, dental, and vision coverage, retirement plan options, paid time off, and professional development opportunities. Employees also have access to wellness programs and employee assistance resources to support work-life balance, health, and overall well-being.
Why Join Father Joe&rsquo;s Villages
Work with a mission-driven organization committed to strengthening systems that protect and empower the communities we serve. Collaborate with dedicated professionals, grow your technical expertise, and contribute to the security and resilience of critical services supporting individuals and families experiencing homelessness.
Conditions of Employment
Employment is contingent upon successful completion of applicable pre- and post-employment requirements, which may include background checks, system access reviews, and other role-related requirements following a conditional offer of employment.
 Equal Employment Opportunity
Father Joe&rsquo;s Villages is an equal opportunity employer dedicated to building a diverse, inclusive workforce. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, veteran status, or any other characteristic protected by law.</div>

Cybersecurity Compliance Analyst

Alignerr

<div>
 
 About The Job
 
 
 
 At Alignerr, we partner with the world&rsquo;s leading AI research teams and labs to build and train cutting-edge AI models.
 
 
 We&rsquo;re looking for people who understand how data leaks actually happen. You will work with realistic incidents and controls to model how sensitive information is exposed, detected, and protected across modern organizations.
 
 
 
 Organization
 
 : Alignerr
 
 Position
 
 : Data Security &amp; DLP Analyst
 
 Type
 
 : Contract / Task-Based
 
 Compensation
 
 : $38&ndash;$60 /hour
 
 Location
 
 : Remote
 
 Commitment
 
 : 10&ndash;40 hours/week
 
 
 
 What You&rsquo;ll Do
 
 
 
 <ul>
 <li>
 Analyze data-security and DLP scenarios across cloud, SaaS, and enterprise systems
 </li>
 <li>
 Classify data sensitivity, exposure paths, and policy violations
 </li>
 <li>
 Review prevention, detection, and response strategies
 </li>
 <li>
 Help generate, label, and validate realistic data-security cases used to train and evaluate AI systems
 
 
 </li>
 </ul>
 
 What We&rsquo;re Looking For
 
 
 
 <ul>
 <li>
 2+ years in data security, compliance, or security operations
 </li>
 <li>
 Familiarity with DLP tools, data classification, and privacy or regulatory concepts
 </li>
 <li>
 Practical understanding of how data risk plays out in real environments
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Competitive pay and flexible remote work.
 </li>
 <li>
 Work directly on frontier AI systems.
 </li>
 <li>
 Freelance perks: autonomy, flexibility, and global collaboration.
 </li>
 <li>
 Potential for contract extension.
 
 
 </li>
 </ul>
 
 Application Process (Takes 10&ndash;15 min)
 
 
 
 <ul>
 <li>
 Submit your resume
 </li>
 <li>
 Complete a short screening
 </li>
 <li>
 Project matching and onboarding
 
 
 </li>
 </ul>
 
 PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
 
</div>

Data Security & DLP Analyst

Deziners Studio

Job Summary:We are seeking a detail-oriented and experienced Risk &amp; Compliance Analyst &ndash; Cyber Security to support and strengthen the organization&rsquo;s information security governance framework. The role involves identifying and assessing cyber risks, ensuring compliance with regulatory and industry standards, supporting audits, and driving remediation efforts to reduce risk exposure.Key Responsibilities:<ul><li>Conduct enterprise-wide cybersecurity risk assessments and maintain risk registers.</li><li>Identify control gaps, assess vulnerabilities, and recommend remediation strategies.</li><li>Ensure compliance with security standards and frameworks (ISO 27001, NIST CSF, SOC 2, PCI-DSS, GDPR, etc.).</li><li>Perform IT General Controls (ITGC) testing and compliance monitoring.</li><li>Support internal, external, and regulatory audits; track and close audit findings.</li><li>Develop, review, and update information security policies, procedures, and SOPs.</li><li>Manage third-party/vendor risk assessments and ongoing compliance reviews.</li><li>Collaborate with IT, DevOps, and Security teams to implement corrective controls.</li><li>Monitor changes in regulatory requirements and assess organizational impact.</li><li>Prepare compliance dashboards, risk reports, and presentations for management.</li><li>Assist in incident response reviews from a risk and compliance perspective.</li></ul>Required Skills &amp; Competencies:<ul><li>Strong knowledge of cybersecurity frameworks and governance standards.</li><li>Experience in risk assessment methodologies and control validation.</li><li>Hands-on experience with GRC tools (e.g., Archer, ServiceNow GRC, MetricStream).</li><li>Understanding of cloud security compliance (AWS, Azure, GCP).</li><li>Familiarity with data privacy regulations and security best practices.</li><li>Strong analytical, documentation, and reporting skills.</li><li>Excellent communication and stakeholder management abilities.</li><li>Ability to manage multiple projects and deadlines effectively.</li></ul>Qualifications &amp; Experience:<ul><li>Qualification: Bachelor&rsquo;s Degree in Information Security, IT, Computer Science, or related field.</li><li>Experience: 4&ndash;7 years of relevant experience in Cybersecurity Risk, IT Compliance, or Information Security Governance.</li><li>Preferred Certifications: CISA, CISM, CRISC, ISO 27001 LA/LI, CISSP.</li></ul>Job Types: Full-time, PermanentPay: ₹40,000.00 - ₹45,000.00 per monthBenefits:<ul><li>Provident Fund</li></ul>Work Location: In person

Risk & Compliance Analyst - Cyber Security

Search 10000+ Security and compliance analyst jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 security and compliance analyst jobs Near Me

Cybersecurity Risk & Compliance Analyst

Information Security Compliance Analyst

Data Analyst II, Ethics, Compliance, & Security

Cybersecurity Compliance Analyst

Data Security & DLP Analyst

Data Analyst II, Ethics, Compliance, & Security

Risk & Compliance Analyst - Cyber Security