Security Compliance Analyst - GRC, Audits & Trust

Certinia; Harrogate; On-site; GBP 52,000 - 70,000; Full time

Job summary

Certinia is seeking a Security Compliance Analyst to support enterprise-wide security compliance and customer trust initiatives. You will work with IT, Legal, and Privacy to assist audits, governance reviews, and third‑party risk management, reporting to the Head of Information Security.

You will help respond to security questionnaires, maintain approved responses, and assist with customer conversations about security in our products, while aligning with frameworks like ISO 27001, SOC 1/2, and

Qualifications

• 2+ years of information security experience, in particular Governance, Risk & Compliance (GRC) or IT audit background.
• Experience implementing or auditing information security programs based on ISO 27001, SOC 1, SOC 2, FedRAMP, or similar.
• Bachelor’s Degree or equivalent work experience in Computer Science, Engineering, Accounting, or related field.
• Strong written and spoken communication skills, with ability to tailor messages for audiences including legal, IT, security, sales, or customer success.

Responsibilities

• Support Customer Trust program, including security questionnaires and RFx responses.
• Maintain the database of standard responses in Responsive and support the Certinia Proposal Manager as applicable.
• Assist with customer calls to highlight security within products.
• Support audits and readiness initiatives across frameworks such as SOC 1, SOC 2, ISO 27001, ISO 42001, FedRAMP.
• Monitor remediation efforts with stakeholders across geographies and time zones.
• Document gap analysis in work programs and track remediation progress.
• Support the creation, review, and maintenance of information security policies, standards, procedures, and guidelines.
• Maintain enterprise-wide security controls library and map controls to frameworks.
• Works with Legal to support security language aligned to the company's commitments.
• Performs third-party security risk assessments for scheduled annual assessments and onboarding of new vendors.
• Maintains inventory of vendors for risk management within Whistic, ensuring up-to-date information and audit-ready documentation.
• Supports and tracks remediation required for any non-compliance issues identified.

Skills

GRC experience

Customer-facing communication

Written communication

Global teams across time zones

Education

Bachelor’s Degree or equivalent in CS/Engineering/Accounting

Tools

ISO 27001

SOC 1

SOC 2

FedRAMP

CSA CAIQ / VSA / SIG Lite

Job description

Certinia is seeking a Security Compliance Analyst to support enterprise-wide security compliance and customer trust initiatives. You will work with IT, Legal, and Privacy to assist audits, governance reviews, and third‑party risk management, reporting to the Head of Information Security.

You will help respond to security questionnaires, maintain approved responses, and assist with customer conversations about security in our products, while aligning with frameworks like ISO 27001, SOC 1/2, and