Security & Compliance Analyst for SaaS Trust

Certinia; Harrogate; On-site; GBP 65,000 - 90,000; Full time

Job summary

Certinia is seeking a Security Compliance Analyst to support enterprise-wide security compliance and customer trust programs. You will engage with sales, IT, Legal, and Privacy, and report to the Head of Information Security.

You will help respond to customer security questionnaires, support audits, and maintain a controls library aligned to SOC 1, SOC 2, ISO 27001, ISO 42001, and FedRAMP. This is a global role working with teams across time zones.

Qualifications

• 2+ years of information security experience in GRC or IT audit.
• Experience implementing or auditing information security programs based on ISO 27001, SOC 1, SOC 2, FedRAMP or similar.
• Bachelor’s Degree or equivalent in Computer Science, Engineering, Accounting, or related field.
• Strong, customer-facing communication skills and ability to simplify complex concepts.

Responsibilities

• Supports Customer Trust Program including customer security questionnaires and RFx responses.
• Maintains database of standard responses and supports the Proposal Manager.
• Assists with security language reviews with Legal and IT stakeholders.
• Supports compliance audits and readiness initiatives (SOC 1, SOC 2, ISO 27001, ISO 42001, FedRAMP).
• Monitors remediation efforts across geographies and time zones.
• Documents gap analyses and tracks remediation progress.
• Supports creation and maintenance of information security policies and guidelines.

Skills

GRC experience

Customer-facing communication

Written communication

Global teams

Information security

Education

Bachelor's degree in related field

Tools

Whistic

CSA CAIQ

SIG Lite

SOC/ISO frameworks

Job description

Certinia is seeking a Security Compliance Analyst to support enterprise-wide security compliance and customer trust programs. You will engage with sales, IT, Legal, and Privacy, and report to the Head of Information Security.

You will help respond to customer security questionnaires, support audits, and maintain a controls library aligned to SOC 1, SOC 2, ISO 27001, ISO 42001, and FedRAMP. This is a global role working with teams across time zones.