This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Lead Compliance Analyst based in the United States.
This senior-level role sits at the heart of a fast-evolving Security Compliance function, responsible for ensuring that internal controls and governance frameworks scale effectively alongside rapidly advancing products and emerging AI-driven technologies. You will play a key role in safeguarding regulatory integrity while enabling innovation in a complex, high-growth SaaS environment. The position combines deep audit execution expertise with hands-on ownership of compliance programs spanning SOX, SOC, HIPAA, and PCI. You will partner closely with Engineering, Product, Security, and Finance teams to design and strengthen scalable control environments. This is a highly impactful individual contributor role where strategic thinking, technical fluency, and strong judgment are essential to success. You will also help shape the future of compliance by reducing manual processes and driving automation across the control landscape.
Accountabilities:
- Lead end-to-end execution of third-party audits, including evidence collection, walkthroughs, stakeholder coordination, and audit readiness activities.
- Oversee compliance onboarding for new products, features, and engineering changes, ensuring control design and operational readiness prior to release.
- Partner with cross-functional teams to define, assess, and validate internal controls across SOX, SOC 1, SOC 2, HIPAA, and PCI frameworks.
- Manage remediation efforts by working closely with Engineering, Product, and Finance teams to resolve control gaps and validate corrective actions.
- Identify recurring issues and systemic risks, escalating insights to leadership and supporting long-term risk reduction strategies.
- Drive continuous improvement of the compliance program by standardizing processes and reducing manual audit effort.
- Collaborate with Security Automation and Engineering teams to enable scalable, programmatic control monitoring and compliance checks.
Requirements:
- Extensive experience in IT Compliance, GRC, or Security Compliance within a SaaS or technology-driven organization.
- Strong hands-on expertise with SOC 1, SOC 2, ISO 27001, control design, audit readiness, and remediation processes.
- Experience working with SOX 404 requirements and regulated frameworks such as HIPAA and/or PCI.
- Familiarity with emerging AI governance frameworks such as ISO 42001, NIST AI RMF, AIUC-1, or similar standards.
- Proven ability to partner effectively with Product and Engineering teams in complex technical environments.
- Demonstrated capability to independently own and deliver end-to-end compliance initiatives.
- Strong analytical thinking, problem-solving ability, and attention to detail.
- Excellent written and verbal communication skills, with the ability to influence technical and non-technical stakeholders.
- Preferred certifications include CISA, CRISC, CISSP, or equivalent.
Benefits:
- Annual cash compensation range: USD $112,700 – $180,300 depending on experience and location.
- Eligibility for performance-based bonuses and potential equity participation in eligible roles.
- Comprehensive medical, dental, and vision insurance coverage.
- Retirement savings plan with employer 401(k) matching contributions.
- Paid time off including vacation days, sick leave (based on state requirements), paid holidays, and personal days.
- Inclusive, transparent, and flexible work culture supporting remote and hybrid arrangements.
- Professional growth opportunities in a high-impact, innovation-driven environment.