Lead Compliance Analyst

Responsibilities

• Oversee the third‑party audit execution lifecycle, including evidence gathering, walkthroughs, and stakeholder management
• Lead compliance onboarding for new products, features, and major engineering changes
• Review control design and operational readiness prior to go‑live
• Provide clear, actionable guidance to teams on control expectations and evidence requirements
• Lead implementation for new and evolving compliance obligations
• Work directly with Engineering, Product, and Finance partners to support remediation of control gaps
• Validate corrective actions and ensure issues are fully resolved
• Track recurring issues and surface systemic risks to leadership
• Identify opportunities to reduce manual effort through better design, standardization, and automation
• Partner with Security Automation and Engineering teams to support programmatic compliance checks over time

Requirements

• Extensive demonstrated experience in IT Compliance or Security GRC, preferably in a SaaS or technology‑driven environment
• Strong hands‑on experience with:
  • SOC 1 / SOC 2 or ISO 27001
  • Control automation or GRC engineering
  • Control design and readiness assessments
  • Issue remediation and audit support
• Familiarity with:
  • SOX 404
  • HIPAA and/or PCI
  • ISO 42001, NIST AI RMF, AIUC‑1, or other AI and agentic control frameworks
• Experience partnering with Product and Engineering teams on compliance matters
• Ability to independently own complex compliance initiatives end‑to‑end
• Strong written and verbal communication skills