Senior Security Compliance Analyst (Remote - US) - job 1 of 2
This position is posted by Jobgether on behalf of FormAssembly. We are currently looking for a Senior Security Compliance Analyst in United States.
Join a growing, remote-first SaaS company as a Senior Security Compliance Analyst, where you’ll lead enterprise-level compliance efforts and own key security certifications such as FedRAMP, DoD IL2-5, SOC 2, and ISO 27001. You’ll work cross-functionally with teams across Engineering, Product, Sales, and HR to manage audit cycles, assess risk, and strengthen security practices. This role plays a pivotal part in maintaining the organization’s credibility with government and enterprise clients. It's an excellent opportunity for experienced professionals ready to make a high-impact contribution in a flexible, dynamic work environment.
Accountabilities:
- Lead and manage compliance initiatives including FedRAMP, DoD IL2-IL4, SOC 2, PCI-DSS, and ISO 27001.
- Serve as the internal subject matter expert across all relevant security frameworks and regulations.
- Conduct detailed technical control assessments, policy reviews, and risk-based walkthroughs.
- Provide executive-level reporting on residual risk, vulnerabilities, and overall compliance posture.
- Support security automation and continuous monitoring projects to enhance efficiency.
- Respond to customer security assessments, vendor questionnaires, and RFPs with technical expertise.
- Guide teams through audit processes and ensure successful ongoing certification maintenance.
- Champion the development of policies, training programs, and implementation of best practices.
- Act as the primary point of contact for government security compliance matters.
- Minimum of 5 years of experience managing security compliance audits, especially FedRAMP, DoD IL2-5, SOC 2, ISO 27001, and PCI.
- Deep understanding of NIST 800-53, DoD SRG, and associated continuous monitoring processes.
- Experience collaborating with Engineering, IT, Product, and other business teams.
- Familiarity with privacy and security frameworks like GDPR, CCPA, CPRA, and EU Cyber Resilience Act is a plus.
- Proven ability to produce clear and actionable risk assessments and remediation strategies.
- U.S. citizenship is required due to the nature of compliance regulations.
- Must hold either a CISSP or Security+ certification in good standing.
- Additional certifications such as CISM, CISA, CRISC, SANS GIAC, or ISO 27001 Lead Auditor are a strong plus.
- Salary range: $115,000 - $130,000
- 100% remote work with flexible scheduling
- Health, dental, and vision insurance (U.S.-based team members)
- Mental health support via SpringHealth
- 401(k) with 4% company match
- Unlimited PTO (minimum 2 weeks use required)
- 9 paid company holidays
- Up to 16 weeks of paid parental leave
- Annual budget for professional development
- Charitable donation matching
- Company-provided Mac laptop
- A vibrant and collaborative remote culture with a focus on work-life balance
Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.
When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly.
🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements.
📊 It compares your profile to the job’s core requirements and past success factors to determine your match score.
🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role.
🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed.
The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role.
Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team.
Thank you for your interest!
#LI-CL1
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
Drive adoption and engagement of Calm’s wellness platform as a Customer Success Manager managing mid-market accounts remotely from New York or Minneapolis.
Activate Care seeks a proactive Senior IT Administrator to manage IT operations and secure technology support in a mission-focused, remote setting.
Lead the vision and execution of GCP compliance and inspection readiness as Director, Clinical Process Compliance at AbbVie, driving operational excellence in clinical trial execution.
Support American Express's privacy compliance journey by managing privacy standards, training rollout, and communications within the Global Privacy Center of Excellence.
An organized Legal Intake Specialist role at Consilio managing legal matter intake, budget support, service of process, and operational programs in a hybrid setting.
The Analyst-Compliance: Termination of Accounts role at American Express focuses on analyzing suspicious financial activity to protect the company from money laundering risks and support global compliance efforts.
AbbVie is looking for an experienced Corporate Counsel to lead legal strategy and counsel for international pharmaceutical marketing and market access.
AbbVie seeks a detail-oriented Site Contract Manager to manage clinical study agreements and partnerships within a global biopharmaceutical setting.
Contribute your analytical and compliance expertise as an Analyst in American Express’s Global Financial Crimes Compliance team to help combat financial crime and support enterprise risk management.
Contribute your legal expertise as Associate General Counsel, Employment at Children’s Mercy, supporting vital healthcare and employment law functions in a leading pediatric hospital.
A mid-level GRC Analyst role at MeridianLink focuses on managing information security compliance, vendor risk, and audit processes to ensure regulatory adherence and client data protection.
Lead operational risk identification, assessment, and control activities at American Express, driving risk mitigation across corporate functions.
Lead operational risk identification and assessment efforts within American Express' Corporate Function Control Management team to enhance risk mitigation and business resilience.
Responsible for managing affiliate risk assessments and governance, this role ensures regulatory compliance and cross-functional collaboration to support American Express’s affiliate partnerships.
Serve as a Senior Manager driving privacy risk assessment improvements and collaboration within American Express’s Global Privacy Center of Excellence.
Jobgether has the ambition to disrupt the recruitment industry as we know it by simplifying it and making it more accurate 🎯 Jobgether platform connects candidates and companies based on: - Skills -... Values - Ambition - Personality The candidat...
485 jobs
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
