Senior Compliance Analyst

🕒 Outubro 23

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $120.000 - $140.000 / ano

⏰ Tempo Integral

🟠 Sênior

🚔 Conformidade

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 18 dias.
• As vagas desta empresa costumam ser preenchidas em 28 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Accela

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 2000

💼 Consultoria

📦 Logística

🏗️ Construção

Consulting • Logistics • Construction

Accela é líder em fornecer soluções baseadas em nuvem projetadas para modernizar os serviços governamentais. Seu conjunto unificado de aplicativos inovadores se concentra em construir comunidades mais conectadas por meio de eficiência aprimorada e gerenciamento seguro de dados. A Accela capacita governos locais e estaduais ao simplificar processos como licenças de construção, licenciamento, regulamentação de cannabis e saúde ambiental. Com foco em soluções cívicas, a Accela busca melhorar as operações do setor público eliminando silos de dados e facilitando melhores interações com os residentes. Ao aproveitar sua plataforma SaaS, os governos podem melhorar a prestação de serviços, aumentar a transparência e reduzir os custos operacionais, levando a economias significativas de tempo e custo.

Descrição

• Lead the end-to-end implementation and certification of Accela's ISO/IEC 27001:2022 program • Develop and manage implementation plans, milestones, deliverables, and stakeholder responsibilities • Conduct gap assessments, identify compliance requirements, and coordinate remediation activities • Establish and maintain ISMS scope, objectives, and Statement of Applicability • Coordinate external certification, surveillance, and recertification audits, including preparation, evidence collection, stakeholder interviews, and remediation of findings • Monitor progress, risks, and dependencies and provide regular updates to the GRC Manager • Conduct and maintain information security risk assessments, risk registers, and risk treatment plans • Partner with control owners to implement, assess, document, and monitor ISO 27001 controls • Evaluate control effectiveness, identify gaps, and track remediation through completion • Coordinate internal audits, management reviews, corrective actions, and continual improvement activities • Monitor organizational and regulatory changes affecting ISMS requirements and compliance obligations • Develop and maintain information security policies, procedures, standards, and supporting ISMS documentation • Establish documentation management, control assessment, evidence collection, and compliance monitoring processes • Maintain accurate, current, approved, and audit-ready documentation and records • Integrate ISO 27001 requirements into existing business processes • Maintain ISO 27001 requirements, controls, risks, evidence, and remediation activities in Accela's GRC platform, including Drata • Map controls and evidence to ISO 27001 requirements and leverage automation for evidence collection, reporting, and audit readiness • Establish control ownership, evidence requirements, and ongoing monitoring processes • Partner with Information Security, IT, Engineering, HR, Legal, Finance, and other stakeholders to operationalize ISO 27001 requirements • Communicate compliance expectations, priorities, and deadlines while driving cross-functional accountability • Align ISO 27001 activities with broader GRC initiatives alongside the GRC Manager • Leverage SOC 2 controls and evidence and support alignment with GovRAMP, NIST SP 800-53, and PCI DSS • Provide reporting on certification readiness, program milestones, compliance gaps, and remediation progress

🎯 Requisitos

• 5+ years of experience in governance, risk and compliance (GRC), information security compliance, security assurance, or a related field • Demonstrated experience leading or substantially owning an ISO/IEC 27001 implementation and certification effort • Strong knowledge of ISO/IEC 27001:2022 requirements, ISMS operations, risk assessment, risk treatment, control implementation, and audit processes • Experience preparing for and coordinating external certification audits, including evidence management and remediation of findings • Experience developing and maintaining compliance policies, procedures, risk assessments, and control documentation • Hands-on experience with a GRC or compliance automation platform, such as Drata or a comparable solution • Strong project management, analytical, and organizational skills • Excellent communication and stakeholder management skills, including translating technical requirements into actionable business processes • Ability to influence and drive accountability across cross-functional teams without direct reporting authority • ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or comparable professional certification • Working knowledge of SOC 2 Type II, GovRAMP, NIST SP 800-53, CIS Controls, or PCI DSS • Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent practical experience (preferred) • Experience supporting GRC programs within a SaaS, cloud technology, or enterprise software environment (preferred) • Familiarity with AWS or comparable cloud environments and associated security controls (preferred) • Experience leveraging compliance automation platforms and integrating requirements across multiple compliance frameworks (preferred)

🏖️ Benefícios

• Annual bonus target; discretionary bonus based on company and individual goal achievement • Flexible time off • Comprehensive medical, dental, and vision plans • Family planning benefits • 401(k) retirement savings plan with company match • Health savings account with company contributions • Flexible spending account • Life, accident, and disability coverage • Business travel insurance • Employee assistance programs • Other well-being benefits • Job accommodations available upon request

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo