As a Senior Analyst – Security Compliance, you will play a crucial role in ensuring the integrity, confidentiality, and availability of our information systems and data. This role involves developing, implementing, and managing security compliance programs, conducting risk assessments, and collaborating with various teams to embed security best practices across the organization.
What you’ll do
- Perform risk assessments related to information systems, processes, and applications.
- Conduct gap analysis against various security frameworks (e.g., ISO 27001, SOC 2, NIST, PCI DSS).
- Develop and implement security policies, standards, and procedures.
- Manage and track remediation efforts for identified security vulnerabilities and control deficiencies.
- Collaborate with engineering, product, and legal teams to embed security and compliance requirements into the SDLC.
- Assist in responding to security incidents and provide support during audits and assessments.
- Monitor regulatory changes and industry best practices to ensure continuous compliance.
- Provide security awareness training and guidance to employees.
- Maintain documentation of security controls, processes, and procedures.
- Lead efforts to maintain and mature the enterprise GRC platform.
Who you are
- 5+ years of experience in information security, compliance, or risk management.
- Strong understanding of security frameworks and regulations (e.g., ISO 27001, SOC 2, NIST, PCI DSS, GDPR, CCPA).
- Experience with GRC platforms (e.g., ServiceNow GRC, LogicManager, Archer).
- Proficiency in conducting risk assessments and developing remediation plans.
- Excellent written and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced environment.
- Relevant certifications (e.g., CISSP, CISM, CISA, CRISC) are a plus.
- Experience in the cryptocurrency or financial services industry is a plus.
