Senior Compliance Analyst

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $120k - $140k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Accela

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2000

💼 Consulting

📦 Logistics

🏗️ Construction

Consulting • Logistics • Construction

Accela is a leader in providing cloud-based solutions designed to modernize government services. Their unified suite of innovative applications focuses on building more connected communities through enhanced efficiency and secure data management. Accela empowers local and state governments by streamlining processes such as building permits, licensing, cannabis regulation, and environmental health. With a focus on civic solutions, Accela aims to improve public sector operations by eliminating data silos and facilitating better interactions with residents. By leveraging their SaaS platform, governments can enhance service delivery, increase transparency, and reduce operational costs, leading to significant time and cost savings.

📋 Description

• Lead the end-to-end implementation and certification of Accela's ISO/IEC 27001:2022 program • Develop and manage implementation plans, milestones, deliverables, and stakeholder responsibilities • Conduct gap assessments, identify compliance requirements, and coordinate remediation activities • Establish and maintain ISMS scope, objectives, and Statement of Applicability • Coordinate external certification, surveillance, and recertification audits, including preparation, evidence collection, stakeholder interviews, and remediation of findings • Monitor progress, risks, and dependencies and provide regular updates to the GRC Manager • Conduct and maintain information security risk assessments, risk registers, and risk treatment plans • Partner with control owners to implement, assess, document, and monitor ISO 27001 controls • Evaluate control effectiveness, identify gaps, and track remediation through completion • Coordinate internal audits, management reviews, corrective actions, and continual improvement activities • Monitor organizational and regulatory changes affecting ISMS requirements and compliance obligations • Develop and maintain information security policies, procedures, standards, and supporting ISMS documentation • Establish documentation management, control assessment, evidence collection, and compliance monitoring processes • Maintain accurate, current, approved, and audit-ready documentation and records • Integrate ISO 27001 requirements into existing business processes • Maintain ISO 27001 requirements, controls, risks, evidence, and remediation activities in Accela's GRC platform, including Drata • Map controls and evidence to ISO 27001 requirements and leverage automation for evidence collection, reporting, and audit readiness • Establish control ownership, evidence requirements, and ongoing monitoring processes • Partner with Information Security, IT, Engineering, HR, Legal, Finance, and other stakeholders to operationalize ISO 27001 requirements • Communicate compliance expectations, priorities, and deadlines while driving cross-functional accountability • Align ISO 27001 activities with broader GRC initiatives alongside the GRC Manager • Leverage SOC 2 controls and evidence and support alignment with GovRAMP, NIST SP 800-53, and PCI DSS • Provide reporting on certification readiness, program milestones, compliance gaps, and remediation progress

🎯 Requirements

• 5+ years of experience in governance, risk and compliance (GRC), information security compliance, security assurance, or a related field • Demonstrated experience leading or substantially owning an ISO/IEC 27001 implementation and certification effort • Strong knowledge of ISO/IEC 27001:2022 requirements, ISMS operations, risk assessment, risk treatment, control implementation, and audit processes • Experience preparing for and coordinating external certification audits, including evidence management and remediation of findings • Experience developing and maintaining compliance policies, procedures, risk assessments, and control documentation • Hands-on experience with a GRC or compliance automation platform, such as Drata or a comparable solution • Strong project management, analytical, and organizational skills • Excellent communication and stakeholder management skills, including translating technical requirements into actionable business processes • Ability to influence and drive accountability across cross-functional teams without direct reporting authority • ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or comparable professional certification • Working knowledge of SOC 2 Type II, GovRAMP, NIST SP 800-53, CIS Controls, or PCI DSS • Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent practical experience (preferred) • Experience supporting GRC programs within a SaaS, cloud technology, or enterprise software environment (preferred) • Familiarity with AWS or comparable cloud environments and associated security controls (preferred) • Experience leveraging compliance automation platforms and integrating requirements across multiple compliance frameworks (preferred)

🏖️ Benefits

• Annual bonus target; discretionary bonus based on company and individual goal achievement • Flexible time off • Comprehensive medical, dental, and vision plans • Family planning benefits • 401(k) retirement savings plan with company match • Health savings account with company contributions • Flexible spending account • Life, accident, and disability coverage • Business travel insurance • Employee assistance programs • Other well-being benefits • Job accommodations available upon request