Security and Compliance Analyst

📋 Description

• Own day-to-day operation of compliance programs (SOC 2, PCI DSS, NF525, GDPR, accessibility)
• Lead audit and certification cycles end to end as primary point of contact for auditors
• Own compliance platform (Drata), keeping control mappings, evidence, and policies current
• Maintain and improve security policies, procedures, controls, and risk register
• Run governance activities: access reviews, policy reviews, risk assessments, business continuity
• Run data protection program: records of processing, DPAs, impact assessments, data subject

🎯 Requirements

• 3–5 years in security compliance, GRC, IT audit, risk, or related field
• Hands-on experience running/supporting at least one SOC 2 Type II or PCI DSS audit cycle
• Working knowledge of SOC 2 criteria and/or PCI DSS requirements
• Experience with GRC platform (Drata or similar)
• Experience conducting vendor/third-party security risk assessments
• Experience responding to customer security questionnaires or RFPs

🎁 Benefits

• Equity
• Remote-first company
• Recognized by Forbes as one of America's Best Startup Employers
• Recognized by Built In as 2025/2026 Best Place to Work
• Global team of 'Peeksters'