Senior Compliance and Risk Analyst

📋 Description

• Own and mature the compliance program (SOC 2 & ISO 27001) with automation.
• Lead audits, coordinate evidence, manage auditors, drive remediation.
• Monitor regulatory changes and assess impact on the program.
• Own enterprise risk management: identify, assess, monitor risks.
• Develop metrics, dashboards, and executive reports for leadership.
• Design and improve internal controls across frameworks.

🎯 Requirements

• 5+ years in compliance, risk, audit, or GRC in tech/SaaS.
• Experience leading SOC 2 and ISO 27001 programs.
• Knowledge of NIST, ISO 27001, GDPR, and HIPAA.
• Experience with compliance automation (Drata, Vanta, Tugboat Logic).
• Experience performing User Access Reviews (UARs) via GRC tools.
• Strong controls, risk assessment, and audit processes.

🎁 Benefits

• Top Performer Bonus program or sales incentive.
• Equity awards and competitive benefits.
• Opportunities to learn, grow, and impact product growth.
• Remote-first culture and cross-functional collaboration.