Senior Compliance Analyst

About the Role:

• Lead the ISO/IEC 27001:2022 certification program as the primary subject matter expert.
• Partner with GRC, IT, Engineering, Legal, HR, and Finance to implement and maintain ISMS controls.
• Coordinate audits, risk assessments, and evidence management through a GRC platform like Drata.

What You'll Do:

• Manage certification readiness, external audits, and continuous improvement of the ISMS.
• Develop and maintain security policies, procedures, and risk documentation.
• Integrate ISO 27001 with SOC 2, GovRAMP, NIST SP 800-53, and PCI DSS frameworks.

Who You Are:

• Bring 5+ years of GRC or information security compliance experience.
• Hold certifications like ISO 27001 Lead Implementer, CISA, or CGRC.
• Demonstrate strong project management and cross-functional influence without direct authority.

Compensation and Benefits:

• Earn an annual base salary of $120,000-$140,000 plus discretionary bonus.
• Enjoy flexible time off, comprehensive medical/dental/vision, and 401(k) match.
• Benefit from HSA, FSA, life, accident, disability, travel insurance, and EAP.