Security And Compliance Analyst Jobs

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary Designs, builds, and maintains large-scale data infrastructure and data processing systems. Implements robust and scalable solutions to support data-driven applications, analytics, and business intelligence. What you will do Ensures seamless integration of data from different sources, such as databases, application programming interfaces (APIs), or streaming platforms. Optimizes data processing and query performance by fine-tuning data pipelines, database configurations, and data partitioning strategies. Establishes data quality checks and validations to identify and resolve data issues, ensuring high-quality and reliable data for downstream applications and analytics. Implements security measures to protect sensitive data throughout the data lifecycle by working closely with security teams to ensure data encryption, access controls, and compliance with data protection regulations. Collaborates with cross-functional teams, including data scientists, analysts, software engineers, and business stakeholders. Designs and develops data infrastructure, including data warehouses, data lakes, and data pipelines. Establishes auditing and monitoring mechanisms to track data access and maintain data governance standards. Establishes monitoring and alerting mechanisms

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role The Risk Automation ML team automates Risk and Compliance investigations and decision making at Block through the application of agentic and generative AI technology. We work globally with partners in Product, Engineering and Operations to ensure that we are providing a safe user experience for our customers while minimizing or eliminating bad activity on our platform. We are leveraging agentic and generative AI as an integral part of our toolkit to fulfill our mission. Block's machine learning systems monitor billions of payment transactions across traditional payment and blockchain networks and surface suspicious activity (fraudulent, suspicious, illegal activity and brand violations) for trained Operations analyst review and decisioning. We are leveraging generative AI to accelerate historically manually intensive analyst workflows; by adding features in the investigative UX to accelerate agent productivity and enable them to make faster, more informed and accurate decisions (aka Copilots). We also automate workflows end to end completely eliminating the need for manual reviews (aka Autopilots). This is a new and significant opportunity to rethink and optimize Risk Operations at Block at scale. This is an IC role, but the senior level has significant leadership responsibilities that include owning, and driving strategic roadm

EMPLOYER IS A CONTRACTOR FOR THE U.S. GOVERNMENT. THIS POSITION REQUIRES U.S. CITIZENSHIP. Role Description: Defense Unicorns is seeking a Mid to Senior Software Engineer to help drive our transformation from legacy, on-premises software to a modern, cloud-native platform. In this role you will play a key part in designing and building our next-generation scalable data pipelines to ingest, transform, and load data from diverse sources. You'll be joining Defense Unicorns’ US Navy team and be responsible for creating and owning end-to-end project delivery, and advocating best practices in database usage and system architecture. You will work closely with other software engineers, platform engineers, end users, and external stakeholders. Responsibilities: Partner with data architects, analysts, and a wide variety of stakeholders to translate ambiguous product requirements into technical solutions Design, build, and maintain complex ETL/ELT workflows Implement security protocols, including authentication and authorization, Create optimized transformations to clean, enrich, and model data, utilizing cloud-native tools Ensure data quality, integrity, and compliance, maintaining metadata and lineage Help refactor and modernize existing on-prem systems into distributed, cloud-based services Contribute to the design of authentication, identity management, and RBAC/ABAC frameworks Participate in architectural discussions, code reviews, and ongoing technical improvements Drive best practices in microservice design, testing, observability, and CI/CD automation Collaborate closely with partner company engineers and stakeholders to devise the best solutions for our Mission Heroes Collaborate with the Defense Unicorns product team sharing improvements and growth opportunities for future projects Comfortable in an asynchronous, all remote environment Actively participate in communities of practice via Slack and Github Issues Integrate soft

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a talented Security Analyst within Security GRC to support Security Compliance Operations through recurring control validation, evidence review, reporting preparation, and remediation tracking. This role will help determine whether key security safeguards are operating as intended by performing manual and semi-automated validation activities, analyzing evidence from multiple sources, documenting control gaps, and preparing clear reporting that helps interpret validation results. This is a full-time permanent position based out of Rockstar’s studio in Bangalore, India. WHAT WE DO The Rockstar Games Security team is responsible for advancing the state of information security across the company globally in collaboration with numerous partners and stakeholders by prioritizing and executing security initiatives that drive down risk. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define information security policies, standards, and procedures to safeguard our business and protect our players. We lead efforts to build enterprise security controls ranging from endpoint protection technologies to security incidents and event monitoring solutions. We have a passion for identifying threats and vulnerabilities and coming up with clever solutions to mitigate or remediate those risks. RESPONSIBILITIES Perform recurring manual and semi-automated validation of security controls to confirm safeguards are operating as intended. Collect, review, and organize evidence from systems, tools, reports, an

Here’s a summary of the role: Every enterprise deal reaches the moment where someone in security says “prove it.” You’re the person who answers — quickly, accurately, and with the evidence to back it up. As an Analyst II on our Trust & Assurance team, you’ll own a live queue of security questionnaires, third-party due diligence assessments, RFP security sections and customer assurance requests. You’ll draft at speed using AI-assisted response tooling, then verify every answer against our approved answer library, current SOC 2 and ISO 27001 certifications and the underlying evidence before it leaves your hands. Accuracy is the whole game here: a wrong answer in a customer questionnaire is a commitment we didn’t mean to make. The best part is that you won’t just work the queue — you’ll shrink it. Every recurring question you turn into a published answer on our trust site is a ticket that never comes back. If you’ve spent two to four years in security GRC, compliance, IT audit or customer assurance, you’re precise under volume, and you like being measured on turnaround time and first-pass accuracy, you’ll do well here. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a high-volume queue of security questionnaires, due diligence assessments, RFP security sections and assurance requests, delivering accurate responses within SLA. Use AI-assisted response tooling to draft at speed, then verify every answer against the approved answer library, current certifications and underlying evidence before it goes out. Triage and route incoming requests using established playbooks — resolving the routine independently and escalating anything novel, contractual or architecturally complex. Maintain and expand the answer library by adding approved answers, retiring stale ones and flagging inconsistencies, so the same question never has to be researched twice. Build out trust site and customer-facing content, and show commercial teams how to

Here’s a summary of the role: Every enterprise deal reaches the moment where someone in security says “prove it.” You’re the person who answers — quickly, accurately, and with the evidence to back it up. As an Analyst II on our Trust & Assurance team, you’ll own a live queue of security questionnaires, third-party due diligence assessments, RFP security sections and customer assurance requests. You’ll draft at speed using AI-assisted response tooling, then verify every answer against our approved answer library, current SOC 2 and ISO 27001 certifications and the underlying evidence before it leaves your hands. Accuracy is the whole game here: a wrong answer in a customer questionnaire is a commitment we didn’t mean to make. The best part is that you won’t just work the queue — you’ll shrink it. Every recurring question you turn into a published answer on our trust site is a ticket that never comes back. If you’ve spent two to four years in security GRC, compliance, IT audit or customer assurance, you’re precise under volume, and you like being measured on turnaround time and first-pass accuracy, you’ll do well here. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a high-volume queue of security questionnaires, due diligence assessments, RFP security sections and assurance requests, delivering accurate responses within SLA. Use AI-assisted response tooling to draft at speed, then verify every answer against the approved answer library, current certifications and underlying evidence before it goes out. Triage and route incoming requests using established playbooks — resolving the routine independently and escalating anything novel, contractual or architecturally complex. Maintain and expand the answer library by adding approved answers, retiring stale ones and flagging inconsistencies, so the same question never has to be researched twice. Build out trust site and customer-facing content, and show commercial teams how to

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role The Staff Data Analyst will join the Block Compliance Analytics team chartered to put data at the center of the Compliance organization. You have a proven track record in the Financial Crimes and AML space, and in this role you will develop strategies and lead key workstreams to deliver actionable analytics to leaders throughout the Block business and tell the story of our Compliance program to regulators and external parties. Focused on quantifying compliance risks and driving effectiveness, you will enable Block to redefine the world's relationship with money. You Will Lead data strategy for our regulatory engagements - from ETL development to source data validation to analysis Connect the dots between regulatory expectations, commitments, and the Compliance and Product roadmaps in order to influence strategy Harness raw data to educate internal and external partners on the impact of new regulation, policies, or environmental changes to our compliance program and the Block platforms. Collaborate with partners from legal to engineering to inform strategic builds of essential compliance program elements Establish yourself as a leader in the organization, by connecting insights to action through expert communication and cross-functional alignment Leverage your subject matter expertise to educate, coach and influence in and out of

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role The Staff Data Analyst will join the Block Compliance Analytics team chartered to put data at the center of the Compliance organization. You have a proven track record in the Financial Crimes and AML space, and in this role you will develop strategies and lead key workstreams to deliver actionable analytics to leaders throughout the Block business and tell the story of our Compliance program to regulators and external parties. Focused on quantifying compliance risks and driving effectiveness, you will enable Block to redefine the world's relationship with money. You Will Lead data strategy for our regulatory engagements - from ETL development to source data validation to analysis Connect the dots between regulatory expectations, commitments, and the Compliance and Product roadmaps in order to influence strategy Harness raw data to educate internal and external partners on the impact of new regulation, policies, or environmental changes to our compliance program and the Block platforms. Collaborate with partners from legal to engineering to inform strategic builds of essential compliance program elements Establish yourself as a leader in the organization, by connecting insights to action through expert communication and cross-functional alignment Leverage your subject matter expertise to educate, coach and influence in and out of

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role The Staff Data Analyst will join the Block Compliance Analytics team chartered to put data at the center of the Compliance organization. You have a proven track record in the Financial Crimes and AML space, and in this role you will develop strategies and lead key workstreams to deliver actionable analytics to leaders throughout the Block business and tell the story of our Compliance program to regulators and external parties. Focused on quantifying compliance risks and driving effectiveness, you will enable Block to redefine the world's relationship with money. You Will Lead data strategy for our regulatory engagements - from ETL development to source data validation to analysis Connect the dots between regulatory expectations, commitments, and the Compliance and Product roadmaps in order to influence strategy Harness raw data to educate internal and external partners on the impact of new regulation, policies, or environmental changes to our compliance program and the Block platforms. Collaborate with partners from legal to engineering to inform strategic builds of essential compliance program elements Establish yourself as a leader in the organization, by connecting insights to action through expert communication and cross-functional alignment Leverage your subject matter expertise to educate, coach and influence in and out of

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Security Risk Senior Analyst. About the job The Senior Security Risk Analyst will be a key member of the One Twilio Risk Management program, focused on maturing our Security risk posture by facilitating risk identification and treatment. The team works closely with our Product and Engineering teams to ensure all areas of cyber risk are identified across Twilio and that risk methodologies are operationally effective and in compliance with regulations (e.g. Cybersecurity and/or Telecom / sector-specific regulations) and industry best practice security measures (e.g. NIST RMF, AI RMF, COSO, ISO 31000). This role provides an exciting opportunity for experienced risk professionals who are passionate about risk management and ready to contribute to the continued growth and maturity of risk practices within a dynamic organization like Twilio. Responsibilities In this role, you’ll: Execute and improve upon daily operations

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role: The DDQ Analyst plays an important role in supporting AlphaSense’s global sales process by responding to client Due Diligence Questionnaires accurately, consistently, and on time. This role sits at the intersection of IT Security, Compliance, Sales, Cyber, and Risk, giving the analyst strong exposure to how a global SaaS company supports enterprise customers, protects data, and manages compliance requirements. This is a high-volume, process-driven role suited to someone with hands-on DDQ experience who thrives on structure, attention to detail, and a fast-paced environment. The analyst will use approved response content, documented procedures, and AI-assisted tools to move DDQs through the workflow efficiently, applying sound judgment on which questions can be answered from approved sources and which require escalation to a subject

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from. Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for: Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go. Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them. A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level. Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience. A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here and follow us on LinkedIn for company news, employee stories, and career updates. Job Summary: Drata is looking for a Total Rewards Analyst to strengthen the accuracy, scalability, and insightfulness of our compensation programs while providing reliable support across benefits and broader total rewards operations. This compensation-led role will turn market data and employee data into clear recommendations, support annual compensation and equity cycles, and help leaders make

Procurement Analyst (Procurement Analyst-General) Company: The Boeing Company Boeing Defense, Space & Security (BDS) has an exciting opportunity for an Experienced Procurement Analyst (Level 3) to join our dynamic Chinook team in Ridley Park, Pennsylvania . Position Responsibilities: Defines, designs, plans and deploys internal/external projects Develops processes and tools to measure key performance indicators Extracts, analyzes and prepares reports to measure key supplier and internal performance-to-plan Develops, documents and implements processes and systems in support of company goals Supports the development and implementation of strategies Identifies and implements improvements to streamline and automate process flows Distributes, updates and tracks procurement plans for supply chain integration and procurement analysis Assesses and reports compliance to internal/external stakeholders Develops risk mitigation plan This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. Shift: This position is for 1st shift. Basic Qualifications (Required Skills/Experience): More than 5 years of experience using all the following Microsoft Office Applications (Word, Excel and PowerPoint. More than 5 years of experience working with analytics, data and spreadsheets to build presentations and make recommendations Experience supporting deliverables for both internal and external customers. More than 5 years of experience working across multiple business units and interfacing with k

Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization's Risk Management Framework (RMF) processes. Primary Responsibilities: Lead and support the security accreditation process for information systems. Develop, maintain, and review security authorization packages. Conduct security control assessments in accordance with RMF and applicable security standards. Collaborate with system owners, engineers, and stakeholders to implement security controls. Perform security risk assessments and recommend mitigation strategies. Monitor systems for compliance with cybersecurity policies and standards. Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities. Support continuous monitoring activities, including vulnerability management and security reporting. Prepare documentation for Assessment & Authorization (A&A) activities. Participate in internal and external cybersecurity audits. Stay current on cybersecurity threats, regulatory requirements, and best practices. Basic Qualifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). 3–7 years of experience in cybersecurity, information assurance, or security compliance. Experience implementing or supporting the NIST Risk Management Framework (RMF). Knowledge of: NIST SP 800-37 NIST SP 800-53 NIST SP 800-171 FISMA FedRAMP (preferred) Experience with vulnerability assessment tools such as Tenabl

Team/Role Overview The Client Onboarding Analyst is a trainee professional role. Requires a good knowledge of the range of processes, procedures and systems to be used in carrying out assigned tasks and a basic understanding of the underlying concepts and principles upon which the job is based. Good understanding of how the team interacts with others in accomplishing the objectives of the area. Makes evaluative judgements based on the analysis of factual information. They are expected to resolve problems by identifying and selecting solutions through the application of acquired technical experience and will be guided by precedents. Must be able to exchange information in a concise and logical way as well as be sensitive to audience diversity. Limited but direct impact on the business through the quality of the tasks/services provided. Impact of the job holder is restricted to own job. What you'll do Remediate data in the Clients and Security Coding systems Perform trend analysis and identify root causes Implement or suggest solutions based on the root cause analysis Liaise with other teams globally to ensure data quality is remediated Provide a high level of customer service to our internal stakeholders Own ad-hoc projects from inception through to completion Provide tangible metrics to Management Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency. What we'll need from you Experience in managing various data remediation work st