Senior Compliance AnalystNew$356K
The opportunity
As a Senior Compliance Analyst, you will serve as a key leader and subject matter expert (SME) in safeguarding our global enterprise. Alongside the Cybersecurity Risk and Compliance Team, you will work on the strategy, implementation, and maintenance of a unified cybersecurity compliance framework.
What you'll do
Lead and maintain the enterprise-wide unified cybersecurity framework,: ensuring continuous alignment with industry-leading standards.
Own the lifecycle of certifications and recertifications for critical: frameworks, including but not limited to CMMC/NIST SP 800-171, ISO 27001, Cyber Essentials, and GDPR.
Author and optimize high-quality Governance, Risk, and Compliance (GRC): documentation, including System Security Plans, POA&Ms, policies, and standard operating procedures.
Drive compliance automation by identifying, implementing, and optimizing GRC: tools to streamline compliance tracking and reduce manual auditing efforts.
Design and conduct comprehensive security risk assessments, vulnerability: reviews, and internal audits to identify, evaluate, and mitigate risks across the global infrastructure.
Facilitate external audits, acting as the primary point of contact for: regulatory auditors and assessors, ensuring smooth processes and timely resolution of findings.
What they're looking for
- Professional Certifications: Highly preferred: CISSP, CISA, CRISC, CISM, or equivalent compliance/security credentials.
- Advanced Degree: Master’s degree in Business Administration (MBA), Cybersecurity, or a related discipline.
- GRC Tooling: Experience implementing and managing enterprise GRC platforms.
- Industry Experience: Experience in highly regulated industries such as Aerospace, Defense, Advanced Manufacturing, or high-tech.
