Risk & Compliance Analyst

The Risk & Compliance Analyst supports the organization's information security, risk, and compliance programs by monitoring, evaluating, and maintaining IT security frameworks, policies, standards, controls, and best practices. This role performs compliance and audit activities, evaluates technical evidence from cloud and hosting environments, and works with stakeholders to identify and remediate control gaps.

The Risk & Compliance Analyst independently manages assigned projects and compliance activities from initiation through completion and contributes to continuous improvement through the use of automation, scripting, data analysis, and AI-enabled technologies. The role requires strong technical curiosity, ownership, analytical thinking, and the ability to rapidly learn new technologies, processes, tools, and applications.

What you'll be doing Execute and monitor compliance activities related to IT security frameworks, policies, standards, controls, and industry best practices; analyze findings, identify root causes and control gaps; and communicate results and recommendations to stakeholders and leadership. Coordinate and support internal and external IT security audits, including gathering, reviewing, validating, organizing, and presenting audit evidence and working with control owners to address evidence gaps and remediation activities.

Review and evaluate technical audit evidence from cloud, SaaS, hosting, infrastructure, identity, network, security, and other technology environments to determine whether controls are appropriately designed, implemented, and operating effectively. Translate industry standards, regulatory requirements, contractual obligations, and audit criteria into actionable security controls, policies, procedures, testing requirements, and compliance activities.

Independently manage assigned compliance projects and workstreams from planning through completion, including defining activities, coordinating stakeholders, tracking milestones and dependencies, resolving issues, and delivering required outcomes with limited supervision. Identify opportunities to automate repetitive compliance, audit, evidence collection, testing, reporting, and data analysis activities; develop or support scripts, integrations, workflows, and AI-enabled solutions to improve efficiency and scalability.

Build and maintain productive relationships with internal stakeholders, control owners, technology teams, auditors, and other compliance partners while asking probing questions and challenging assumptions when additional information or evidence is required. Manage multiple concurrent audits, compliance activities, projects, and deadlines; maintain accurate documentation and proactively communicate risks, issues, dependencies, and status.

Assist the sales team by responding to security questionnaires and questions submitted by customers and prospects. What you'll likely bring Strong working knowledge of information security, IT risk, compliance, audit principles, and control frameworks, with sufficient technical understanding of cloud and hosted environments to analyze system configurations, access controls, logs, infrastructure evidence, security controls, and other technical audit artifacts.

Fluency with modern AI technologies, including generative AI, large language models, AI agents, and AI-enabled automation, with the ability to understand their capabilities, limitations, security and compliance considerations, and appropriate application to compliance processes. Working knowledge of scripting and development concepts, with an interest and ability to develop automation that reduces manual compliance activities.

Strong project management, analytical, problem-solving, and organizational skills, including the ability to independently take ownership of work, manage multiple competing priorities and projects, meet deadlines, and drive activities through completion. Demonstrated curiosity and learning agility