Sr. Compliance Analyst

📋 Description

• Lead the end-to-end implementation and certification of the ISO/IEC 27001:2022 program
• Assess existing practices against ISO 27001 requirements, identify compliance gaps, coordinate
• Define and maintain the ISMS scope, objectives, and Statement of Applicability (SoA), ensuring that
• Coordinate external certification, surveillance, and recertification audits, including preparation
• Conduct and maintain information security risk assessments, risk registers, and risk treatment
• Coordinate internal audits, management reviews, corrective actions, and ongoing improvement

🎯 Requirements

• At least 5 years of experience in governance, risk and compliance (GRC), information security
• Demonstrated experience leading or substantially owning an ISO/IEC 27001 implementation and
• Strong knowledge of ISO/IEC 27001:2022 requirements, ISMS operations, risk assessment and
• Experience preparing for and coordinating external certification audits, including evidence
• Proven ability to develop and maintain compliance policies, procedures, risk assessments, control
• Hands-on experience with a GRC or compliance automation platform, such as Drata or an equivalent

🎁 Benefits

• Base Salary: $120,000–$140,000 annually, before applicable taxes. The final offer may vary based on
• Eligibility for a discretionary annual bonus, with a target based on company and individual goal
• Comprehensive healthcare plan options (Medical, Dental, and Vision Insurance).
• Flexible paid time off to support work-life balance.
• 401(k) retirement plan with a company match.
• HSA with company contributions.