Senior Analyst, Security Compliance & Assurance

What you'll do

• Serve as the primary point of contact for internal, external, and regulatory audits including SOC, FFIEC, SOX, ISO, PCI, and NIST.
• Manage the end-to-end audit lifecycle by coordinating evidence collection, interpreting controls, and performing readiness activities.
• Validate control design and operating effectiveness while tracking compliance gaps and remediation actions to ensure timely closure.
• Ensure cloud-native compliance for Google Cloud and Azure environments by partnering with product teams to embed requirements early.
• Oversee vulnerability management by monitoring SLA performance and managing risk exceptions.
• Consolidate disparate business unit procedures into a unified framework aligned with corporate policies and standards.
• Develop leadership-level reports and metrics regarding audit readiness, compliance trends, and program outcomes.

What we're looking for

• Bachelor’s degree in Information Security, Information Technology, Risk Management, or a related field.
• Minimum of 6 years of experience coordinating IT compliance and audit activities and supporting compliance requirements for audits.
• Advanced understanding of SOC, FFIEC, ISO, PCI, SOX, or NIST control requirements and mapping.
• Strong working knowledge of cloud-native compliance expectations across multiple platforms.
• Skilled in evidence quality review, process optimization, and coordinating audit readiness independently.
• Capability to evaluate remediation plans and track SLA adherence.
• Advanced analytical and data reporting abilities (preferred).
• CISA, CISM, CCSK, CISSP, GIAC, or cloud-related certifications (preferred).