Senior Information Security Analyst - Compliance - InfoSec

📋 Description

• Lead compliance programs for SOC 2, ISO 27001, PCI DSS, FedRAMP, and TISAX.
• Plan, manage, and execute audits with stakeholders for evidence collection.
• Develop governance processes to strengthen compliance and improve scalability.
• Own Elastic's security awareness and education program.
• Translate compliance requirements into practical, risk-based security controls.
• Partner with cross-functional teams to implement security controls.

🎯 Requirements

• Experience leading compliance audits and certifications (SOC 2, ISO 27001, PCI DSS).
• Experience managing or supporting a security awareness and education program.
• Translate complex compliance requirements into practical guidance for tech and business.
• Experience collaborating across cross-functional teams (Engineering, IT, Legal).
• Experience evaluating AI governance and AI-related compliance considerations.
• Strong organizational skills with the ability to prioritize multiple initiatives.

🎁 Benefits

• Health coverage for you and your family in many locations.
• Flexible locations and schedules for many roles.
• Generous vacation days each year.
• Company-matched donations up to $2000 (local currency equivalent).
• Up to 40 hours per year to use toward volunteer projects.
• Parental leave: minimum of 16 weeks.