Security And Compliance Analyst Jobs

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Governance Programs for our SnowTrust GRC team. In this highly visible role, you will define and scale governance programs, strengthen our existing compliance architecture, and partner with leaders across IT, Legal, Product, Security, and Engineering to raise our security posture and build customer trust worldwide. AS A SENIOR COMPLIANCE ANALYST, GOVERNANCE PROGRAMS AT SNOWFLAKE, YOU WILL: Build a deep understanding of regulated-industry compliance requirements and how they apply to Snowflake. Establish and run programs that manage Snowflake's compliance posture against those requirements, including readiness, how we communicate that posture externally, and leading customer and regulator audits. Become an expert on Snowflake's control environment, security features, and best practices for customer deployments. Serve as a trusted advisor on Snowflake's security and compliance obligations and documentation, responding to customer and regulator inquiries. Build self-service resources so customers and field teams can increasingly answer compliance questions on their own. Join sales conversations to explain Snowflake's security and compliance capabilities. OUR IDEAL SENIOR COMPLIANCE ANALYST, GOVERNANCE PROGRAMS WILL HAVE: 5+ years of e

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Customer Trust for our SnowTrust GRC team. You will own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity. You will work daily with IT, Business, Procurement, Security, and Compliance teams, and regularly with leadership, to deliver the vendor and customer projects in your portfolio. AS A SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST AT SNOWFLAKE, YOU WILL: Customer Trust Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations. Become an expert on Snowflake's control environment, security features, and best practices for customer deployments. Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation. Join sales conversations to explain Snowflake's security and compliance capabilities. Third-Party Oversight, Governance, and Risk Management Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements. Partner with Legal and Procurement to make su

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online. What You'll Do Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks Build internal GRC platform and tooling Conduct risk assessments and mitigate data security and compliance risks Write, update and enact policies capturing security, privacy, and AI safety requirements Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices What You'll Bring 6+ years of experience leading engagements in audit and compliance Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling Worked in high tech companies in cloud-native environments Able to translate complex compliance requirements into clear and actionable work-streams Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering Self-motivated, detailed and organized, with a diligent approach to project completion Excellent written, verbal, and interpersonal communication skills

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : Join our team as a Principal Security Compliance Analyst , where you'll take the lead in managing our FedRAMP Moderate program . You'll be part of a fantastic team that values a strong security culture, allowing you to contribute meaningfully to our mission while collaborating with like-minded professionals. Your expertise will help us maintain and enhance our compliance efforts in a supportive and engaging environment. What You Will Be Doing : Manage the FedRAMP Moderate authorization and continuous monitoring program. Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation. Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams. Track security findings and POA&M items through remediation. Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls. Monitor program deadlines, risks, and compliance metrics and report progress to leadership. Review system and product changes for potential FedRAMP impact. Help control owners understand their responsibilities and prepare appropriate evidence. What You Bring : 5+ years of experience managing or supporting a FedRAMP Moderate program. Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requireme

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for a Governance, Risk and Compliance (GRC) Analyst who wants to build GRC with AI, and you do not need to be an engineer to do it. We encourage and equip you to use AI tooling to build automations for audit evidence and customer security questionnaires, alongside assessing AI tools and vendors and managing audits. This is a hybrid role based in San Francisco, New York City, or London with three days a week in the office. What you’ll do: Assess AI tools and vendors against security, privacy, and compliance requirements, and run company compliance and ethics training Maintain the internal controls behind ISO 27001, System and Organization Controls 2 (SOC 2), Health Insurance Portability and Accountability Act (HIPAA), and Payment Card Industry Data Security Standard (PCI DSS) compliance, and drive remediation to completion with documented progress Use AI tooling to build automations that collect audit evidence, monitor controls, and draft security questionnaire responses, and report on controls maturity scores Manage annual audit deliverables, write treatment plans, and track completion across teams Answer customer compliance inquiries and maintain customer-facing security and compliance documentation What you need: 3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment Applied security or privacy controls to AI systems or AI vendors, such as model access, data handling, or third-party risk review Built security policies and technical controls into the software dev

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Senior Tax and Compliance Analyst. About the job This position is needed to lead payroll tax compliance and regulatory adherence across multiple regions, ensuring risk mitigation and operational efficiency for a global, mobile workforce. We are looking for a Senior Tax and Compliance Analyst to oversee payroll tax compliance and mobility regulations across the US, Canada, and LATAM. This role requires expert knowledge of complex tax laws and social security frameworks to manage a highly mobile, fast-growing tech workforce. Reporting to the Senior Manager Americas Payroll, you will drive risk mitigation, compliance accuracy, and scalable process improvements within a dynamic multinational environment. Responsibilities In this role, you’ll: Manage all payroll tax compliance, filings, and reconciliations across the US, Canada, and LATAM. Monitor employee movement across US states and international borders to ensure accurate

Opportunity Overview: We’re looking for a Compliance Analyst to help our team ensure our compliance processes are consistent, scalable, and sustainable as the organization grows. Our team provides centralized ownership and management of the compliance programs by collaborating cross functionally across the organization. You’ll also partner closely with IT and People Operations to ensure the organization operates in accordance with legal, regulatory, and ethical standards. What you’ll do: Support execution of HITRUST, HIPAA, and SOC 2 readiness, certification, and re-certification activities. Assist in remediation of identified deficiencies of gap assessments.. Implement and monitor security controls aligned with HITRUST CSF and related standards. Provide guidance on HITRUST frameworks, MyCSF tool usage, and best practices. Collaborate with IT, security, and compliance teams to ensure smooth certification processes. Prepare and present audit findings and compliance reports to leadership. Support internal training programs to strengthen compliance awareness. Required Qualifications: Education : Bachelor’s degree in Information Security, Risk Management, or related field. Experience : 2 + years in compliance, Access control, ISO or HITRUST-related projects. Preferred Skills Familiarity with GRC tools and cloud security. Knowledge of major compliance frameworks (SOC 2, ISO 27001, GDPR, NIST, HIPAA). Strong analytical, communication, and stakeholder management skills. ISMS roles and responsibilities ( Entry to 5 yrs) Fair understanding of Information Security practices. Align to the organization policies and procedures. Ensure to get updated with ISMS roles as assigned by the department/process heads. Ability to commute/relocate: Hyderabad, Telangana: Reliably commute or planning to relocate before starting work (Preferred) Interview Process*: Connect with Talent Acquisition Meet with the Hiring Manager Behavioral Interview(s) Case Study Interview

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Security & Compliance Analyst Become a Security & Compliance Analyst at Bloomreach. You will join our Governance, Risk, and Compliance team and help maintain our compliance activities, resolve compliance-related issues, and support engineering and sales teams with customer requirements. Bloomreach provides the best digital experience for leading international e-commerce companies, and your work will help protect the trust of hundreds of millions of consumers who shop online. Your tasks and responsibilities As a Security & Compliance Analyst, you will: Support periodic audits of company procedures and processes, and help prepare reports on compliance. Investigate compliance issues, document findings, and support the implementation of appropriate actions. Support the sales process by completing s

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Security & Compliance Analyst Become a Security & Compliance Analyst at Bloomreach. You will join our Governance, Risk, and Compliance team and help maintain our compliance activities, resolve compliance-related issues, and support engineering and sales teams with customer requirements. Bloomreach provides the best digital experience for leading international e-commerce companies, and your work will help protect the trust of hundreds of millions of consumers who shop online. Your tasks and responsibilities As a Security & Compliance Analyst, you will: Support periodic audits of company procedures and processes, and help prepare reports on compliance. Investigate compliance issues, document findings, and support the implementation of appropriate actions. Support the sales process by completing s

Job Requisition ID # 26WD101016 Job Title: SOX IT Compliance Analyst [P4] Location: Canada Company: Autodesk Job Type: Full-Time Job Summary Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting. A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation. They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision. Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcom

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Privacy and Compliance team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer obligations We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We also conduct risk assessments of our third parties to ensure we understand and can mitigate any associated risk. We are looking for a highly motivated, organized, and detail-oriented individual to join our Privacy and Compliance team. As a senior member of this team, you will support our third party risk management program by conducting risk assessments and recommending mitigations. You will also help our Customer Trust team by completing inbound security and data protection questionnaires from potential partners and customers. Responsibilities: Third Party Risk Assessments Review vendor or partner requests from internal stakeholders, understanding the business purpose Work with external stakeholders to collect relevant security and data protection information from third parties Review the information and accurately assess and document the risk, and propose potential mitigations Security Questionnaires Draft responses to customer security questionnaires (e.g., CAIQ, SIG) and assist in the ma

About the team: The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. About the role: Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure. What you'll do: Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA. Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure. Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble. Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners. Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion. Manage the lifecycle of certifications end-to-end, including retirements and transiti

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently while also maintaining our current compliance obligations. You will additionally be a co-owner of our holistic internal risk management and internal control structures. We are looking for a team-focused and mission-oriented compliance professional that can navigate ambiguity and uncertainty, with the ability and desire to achieve goals and drive progress in an environment where outcomes must be achieved through their own resourcefulness and initiative. Core Responsibilities Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes. Have a interest and general aptitude emerging technologies : from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, and a general aptitude for agentic integration within workflows. Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to various audiences, including internal and external stakeholders and auditors. Technica

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently while also maintaining our current compliance obligations. You will additionally be a co-owner of our holistic internal risk management and internal control structures. We are looking for a team-focused and mission-oriented compliance professional that can navigate ambiguity and uncertainty, with the ability and desire to achieve goals and drive progress in an environment where outcomes must be achieved through their own resourcefulness and initiative. Core Responsibilities Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes. Have a interest and general aptitude emerging technologies : from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, and a general aptitude for agentic integration within workflows. Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to various audiences, including internal and external stakeholders and auditors. Technica

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Physical Security Analyst Overview • Physical security and compliance security officer, maintains and monitors physical security policies, standards, and best practices • Abides by Security guidelines relative to security standards to provide safety and security of staff and assets • Manages Security Control Center Coordinators and security operations. • Manages and administers physical security functions for company facilities to ensure the safety; security and protection of MasterCard employees and asset • Recognizes potential and realized security threats and takes reasonable action to mitigate risk or injuries to personnel and or property • Provides MasterCard Corporate Security Standard Operating Guidelines security supervisors and follows-up to ensure adherence • Manages Security officers by delegating department projects, tasks and assignments • Manages Security staff schedules to ensure proper coverage at all times Role • Interaction with employees and guests, provide direction on security policy and visitor directions as needed • Operational use of security systems • Trains and supervises Security officers with respect to the execution of established physical security policies, programs and procedures • Recommends the development and implementation of physical securi