Senior Compliance Analyst

Horizon3.ai

Senior Compliance Analyst managing compliance and data privacy for a remote cybersecurity company. Collaborating with engineering, legal, and other teams to enhance security posture and trust with stakeholders.

Posted 7/24/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $109,000 - $135,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security compliance and risk management, with a strong focus on GDPR, CCPA/CPRA, and SOC 2 Type II compliance. Proven ability to lead audits, manage third-party risk, and effectively communicate complex compliance concepts to diverse stakeholders.

Highest-signal resume keywords

Security Compliance ManagementThird-Party Risk ManagementGDPR ComplianceSOC 2 Type II ExpertiseAudit Coordination

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance FrameworksRisk ManagementVendor Due DiligenceAudit PreparationControl Mapping

Soft Skills

Excellent Communication

Tools & Technologies

AWSOktaMDMSIEMDLP

Certifications & Qualifications

CIPP/USCIPTCISACRISCISO Lead Implementer

Industry Keywords

B2B SaaSCybersecurityData Privacy LawsEmerging U.S. LawsNIST 800-53

Tech Stack

Tools & technologies

AWSCyber Security

About the role

Key responsibilities & impact

Manage inbound customer security requests
Lead audit preparation activities
Drive continuous improvements in our compliance program
Serve as the internal lead for SOC 2 Type II compliance efforts, including control mapping, evidence collection, and audit coordination.
Oversee the organization’s privacy program to ensure compliance with GDPR, CCPA/CPRA, EU AI Act, and emerging U.S. state data privacy laws.
Own and manage the third-party risk management lifecycle, including onboarding reviews, periodic reassessments, and contract/privacy reviews.
Serve as the primary point of contact for responding to customer security questionnaires, RFPs, and due diligence requests.

Requirements

What you’ll need

4–6+ years of experience in security compliance, risk, or privacy—preferably in a B2B SaaS or cybersecurity company.
Deep understanding of compliance frameworks (e.g., SOC2, ISO:27001, NIST AI RMF, NIST 800-53, etc.) and experience leading annual audits.
Expertise in GDPR, CCPA/CPRA, EU AI Act, and emerging U.S. data privacy laws.
Strong working knowledge of third-party risk management practices and vendor due diligence processes.
Experience responding to security questionnaires, RFPs, and customer audits.
Familiarity with common SaaS infrastructure (e.g., AWS, Okta, MDM, SIEM, DLP, etc.).
Excellent communication skills and the ability to translate complex compliance concepts for both technical and non-technical stakeholders.
Certifications such as CIPP/US, CIPT, CISA, CRISC, or ISO Lead Implementer are a strong plus.

Benefits

Comp & perks

Health, vision & dental insurance for you and your family
Flexible vacation policy
Generous parental leave
Equity in the form of stock options
Growth opportunities within the company
Inclusive team culture that values diversity and promotes an inclusive environment