Senior Security Compliance Analyst

OneStudyTeam

Senior Security Compliance Analyst overseeing GRC within OneStudyTeam’s healthcare initiatives. Leading audits, compliance adherence, and risk management across security frameworks.

Posted 6/20/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $110,000 - $140,000 per yearWebsite

About the role

Key responsibilities & impact

Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks.
Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement.
Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory requirements applicable to healthcare data security.
Develop and maintain policies, procedures, and security documentation to meet regulatory and contractual obligations.
Perform gap analyses and risk assessments to identify and remediate compliance risks.
Manage and improve security governance frameworks, ensuring alignment with industry best practices and business objectives.
Conduct third-party vendor risk assessments, ensuring compliance with security policies and contractual obligations.
Monitor security controls, ensuring effectiveness and continuous improvement in alignment with security frameworks.
Support security awareness training initiatives, ensuring employees understand compliance responsibilities.
Stay current on ISO 27001, HIPAA, NIST 800-53, and other relevant standards, translating them into actionable security controls.
Assist in defining security metrics and reporting on compliance status and risk posture to leadership.
Work closely with legal, security, IT, and business teams to align compliance requirements with security operations.

Requirements

What you’ll need

Minimum of a Bachelor's degree in Information Security, Computer Science, Risk Management, or related field (or equivalent experience).
Minimum 8+ years of progressive experience in GRC, compliance, or security audit roles.
Experience in healthcare or regulated industries strongly preferred.
Certifications strongly preferred: ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CISA, HITRUST CCSFP, CRISC.
Experience leading ISO 27001, SOC2, or HITRUST audits, including ISMS implementation and external audit coordination.
Strong understanding of NIST CSF, SOC 2, GDPR, and other security frameworks.
Hands-on experience with customer security audits, including responding to security questionnaires and managing security assessments.
Ability to perform risk assessments, policy reviews, and compliance gap analyses.
Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.
Detail-oriented with excellent organizational and project management skills.
Ability to work independently and collaboratively in a remote environment.
Familiarity with GRC tools (e.g., OneTrust, LogicGate, Archer, Vanta, Drata) is a plus.

Benefits

Comp & perks

🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account OneStudyTeam Website LinkedIn All Job Openings 201 - 500 employees ⚕️ Healthcare Insurance 🧬 Biotechnology 💊 Pharmaceuticals Healthcare Insurance
Biotechnology
Pharmaceuticals OneStudyTeam is a company that provides the StudyTeam platform, a cloud-based solution designed to facilitate the clinical trial process for research sites and sponsors. The platform enhances patient enrollment management by streamlining site workflows and offering real-time insights into recruitment and enrollment data. Used globally by over 10,000 research sites and trusted by leading biopharmaceutical sponsors, OneStudyTeam aims to improve the efficiency of clinical trials and reduce the burden on research sites. Senior Security Compliance Analyst Job not on LinkedIn 🔥 1 hour ago 🇺🇸 United States – Remote 💵 $110k - $140k / year ⏰ Full Time 🟠 Senior 🔐 Security Analyst Apply Now Find Hiring Managers Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks.
Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement.
Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory requirements applicable to healthcare data security.
Develop and maintain policies, procedures, and security documentation to meet regulatory and contractual obligations.
Perform gap analyses and risk assessments to identify and remediate compliance risks.
Manage and improve security governance frameworks, ensuring alignment with industry best practices and business objectives.
Conduct third-party vendor risk assessments, ensuring compliance with security policies and contractual obligations.
Monitor security controls, ensuring effectiveness and continuous improvement in alignment with security frameworks.
Support security awareness training initiatives, ensuring employees understand compliance responsibilities.
Stay current on ISO 27001, HIPAA, NIST 800-53, and other relevant standards, translating them into actionable security controls.
Assist in defining security metrics and reporting on compliance status and risk posture to leadership.
Work closely with legal, security, IT, and business teams to align compliance requirements with security operations. 🎯 Requirements
Minimum of a Bachelor's degree in Information Security, Computer Science, Risk Management, or related field (or equivalent experience).
Minimum 8+ years of progressive experience in GRC, compliance, or security audit roles.
Experience in healthcare or regulated industries strongly preferred.
Certifications strongly preferred: ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CISA, HITRUST CCSFP, CRISC.
Experience leading ISO 27001, SOC2, or HITRUST audits, including ISMS implementation and external audit coordination.
Strong understanding of NIST CSF, SOC 2, GDPR, and other security frameworks.
Hands-on experience with customer security audits, including responding to security questionnaires and managing security assessments.
Ability to perform risk assessments, policy reviews, and compliance gap analyses.
Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.
Detail-oriented with excellent organizational and project management skills.
Ability to work independently and collaboratively in a remote environment.
Familiarity with GRC tools (e.g., OneTrust, LogicGate, Archer, Vanta, Drata) is a plus. Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score Similar Jobs Security Analyst 🔥 14 hours ago IronArch Technology 51 - 200 🤝 B2B 🏛️ Government ☁️ SaaS Website LinkedIn All Job Openings ATO Security Analyst maintaining cybersecurity compliance across VA research environments. Developing ATO packages and leading client-facing meetings for authorization processes. 🇺🇸 United States – Remote 💵 $84k - $101k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst Vulnerability Analyst Mid – SBOM, Supply Chain Risk Management Specialist 🕒 Yesterday Tangent Technologies, LLC 51 - 200 🔒 Cybersecurity 🏢 Enterprise 🏛️ Government Website LinkedIn All Job Openings Information Vulnerability Analyst focusing on cybersecurity challenges for federal customers. Involves SBOM review, security implementation, and technical problem resolution. 🇺🇸 United States – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst Cyber Security Analyst 🕒 Yesterday Cherokee Federal 5001 - 10000 🏛️ Government 🔐 Security 🏢 Enterprise Website LinkedIn All Job Openings Cyber Security Analyst at Criterion responsible for protecting systems and networks from threats. Involves monitoring incidents, assessing risks, and ensuring compliance with cybersecurity standards. 🇺🇸 United States – Remote 💵 $150k - $155k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst Telecommunications, Cybersecurity Analyst 🕒 Yesterday AttainX, Inc. 51 - 200 🔒 Cybersecurity 🤖 Artificial Intelligence Website LinkedIn All Job Openings Telecommunications & Cybersecurity Analyst providing technical support in a federal environment. Engaged in testing, documentation, and coordination of telecommunications services. 🇺🇸 United States – Remote 💵 $70k - $80k / year ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst Cyber Security Analyst 🕒 Yesterday Sigma Software Group 1001 - 5000 🎮 Gaming 📡 Telecommunications Website LinkedIn All Job Openings Cyber Security Analyst investigating and analyzing cyber threats while collaborating with global clients. Working on real-time threat detection and bot mitigation projects. 🇺🇸 United States – Remote ⏰ Full Time 🟡 Mid-level 🟠 Senior 🔐 Security Analyst View More Security Analyst Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Privacy policy Terms of service Job board SEO course AI Apply Copilot OpenClaw job finder Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

ISO 27001HIPAANIST CSFNIST 800-53SOC 2GRCrisk assessmentscompliance gap analysessecurity auditssecurity documentation

Soft Skills

communication skillsorganizational skillsproject management skillsdetail-orientedcollaborativeindependent worktraining and awarenessstakeholder engagementpolicy reviewsauditor engagement

Certifications

ISO 27001 Lead AuditorISO 27001 Lead ImplementerCISSPCISMCISAHITRUST CCSFPCRISC