Compliance Analyst

Job Summary

To support a growing Governance, Risk, and Compliance (GRC) team, the full-time remote Compliance Analyst will manage compliance controls across various regulatory frameworks, lead gap assessments, and support external audits while developing policies and training initiatives.

Key responsibilities

• Manage and maintain compliance controls across multiple global security and regulatory frameworks, including ISO 27001, SOC 2, HIPAA, and PCI DSS
• Lead gap assessments and readiness activities for new or evolving compliance frameworks and regulatory requirements
• Support and coordinate external audits and certifications, including evidence collection and issue tracking

Required qualifications

• 2-4 years of experience in compliance, GRC, security assurance, or a related discipline within a technology or SaaS environment
• Hands-on experience operating compliance programs aligned to multiple frameworks (e.g., ISO 27001, SOC 2, HIPAA, PCI DSS)
• Strong understanding of control design, implementation, and compliance best practices
• Experience supporting external audits and working directly with auditors or certification bodies
• Demonstrated ability to manage complex priorities with attention to detail