Compliance Analyst

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $90k - $118k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🚫👨‍🎓 No degree required

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Southend Pharmacy

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2011

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Southend Pharmacy is a 503A compounding pharmacy based in Houston, Texas that provides customized pharmaceutical preparations and clinical pharmacy services to clinics and healthcare providers across the United States. The company emphasizes clinical excellence, regulatory compliance, and trusted pharmacist expertise, and supports providers with digital tools such as LifeFile and real-time coverage mapping. Trusted by thousands of clinics, Southend Pharmacy focuses on delivering precise, provider-facing pharmaceutical solutions and logistical support for expanded geographic coverage.

📋 Description

• Support the day-to-day operation of the company's SOC 2 program • Coordinate evidence collection, validation, and remediation across control owners • Maintain year-round SOC 2 audit readiness • Identify control gaps, exceptions, and deficiencies and coordinate remediation • Support SOC 2 Type 2 audit fieldwork and auditor requests • Operate and maintain Drata, including API integrations and automated evidence sources • Investigate and remediate failed automated tests and compliance exceptions • Automate manual evidence collection where possible • Support development of the ISO 42001 AI Management System and AI governance program • Maintain an inventory of AI systems, applications, and use cases • Coordinate AI risk and impact assessments, control activities, and evidence collection • Maintain the SaaS/technology inventory and support vendor security and compliance reviews • Track vendor compliance gaps, remediation, and evidence • Maintain the risk register and coordinate periodic updates with risk owners • Support information security, technology, third-party, and AI-related risk assessments • Facilitate quarterly access reviews and track completion and remediation • Organize documentation for SOC 2 and ISO 42001 assessments • Coordinate auditor and assessor requests and maintain audit trails • Track findings and corrective actions through closure • Build monthly compliance and IT dashboards for leadership • Surface upcoming deadlines, overdue items, and risks requiring management attention • Report to the Chief Compliance Officer and work with IT, Security, HR, Legal, and other control owners

🎯 Requirements

• 2–5 years of experience in compliance, GRC, information security, IT audit, or risk management • Working knowledge of SOC 2 and information security controls • Experience with a GRC/continuous compliance platform such as Drata, Vanta, Secureframe, or similar • Experience coordinating evidence collection and remediation across technical and business teams • Familiarity with NIST, ISO 27001, or CIS Controls • Strong organizational skills and comfort managing multiple stakeholders and deadlines • Strong written and verbal communication • Ability to work independently, spot gaps, and drive issues to resolution • Applicants must be legally authorized to work in the United States without current or future sponsorship • Preferred: Experience supporting ISO 42001 or another AI management system • Preferred: Experience with AI governance, AI risk assessments, or emerging technology risk • Preferred: HIPAA or healthcare compliance experience • Preferred: ISO 27001 or other ISO management-system experience • Preferred: CISA, CISM, CRISC, Security+, ISO 27001, or ISO 42001 certification or training

🏖️ Benefits

• Medical, vision, and dental insurance • 401(k) with company match • Paid time off (PTO) • Flex days • Holidays • Full benefits package