Senior Compliance Analyst

Job Summary

Seeking a full-time Senior Compliance Analyst to work remotely, this role will manage compliance and audit activities, oversee data privacy programs, and handle vendor risk management while ensuring adherence to various compliance frameworks.

Key responsibilities

• Serve as the internal lead for SOC 2 Type II compliance efforts, including control mapping and audit coordination
• Oversee the organization's privacy program to ensure compliance with GDPR, CCPA/CPRA, and other data privacy laws
• Manage the third-party risk management lifecycle, including vendor assessments and contract reviews

Required qualifications

• 4-6+ years of experience in security compliance, risk, or privacy, preferably in a B2B SaaS or cybersecurity environment
• Deep understanding of compliance frameworks such as SOC 2, ISO:27001, and NIST standards
• Expertise in GDPR, CCPA/CPRA, and emerging U.S. data privacy laws
• Strong knowledge of third-party risk management practices and vendor due diligence processes
• Experience responding to security questionnaires and customer audits