Security Compliance Analyst — Remote UK

Certinia; United Kingdom; Remote; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Job summary

Certinia is seeking a Security Compliance Analyst to support enterprise-wide security compliance programs across regions. You will assist with customer trust responses, audits, and policy maintenance, collaborating with IT, Legal and Privacy teams.

You will help maintain control frameworks (SOC 1/2, ISO 27001, FedRAMP) and coordinate third-party risk assessments, ensuring evidence is ready for audits and customer inquiries.

Qualifications

• 2+ years information security experience (GRC or IT audit).
• Experience implementing/auditing programs based on ISO 27001, SOC 1/2, FedRAMP or similar.
• Bachelor’s degree or equivalent in CS, Eng, Accounting, or related field.

Responsibilities

• Assist with Customer Trust Program and security questionnaires.
• Maintain database of standard responses for responses and RFx proposals.
• Support customer calls highlighting security within products.
• Aid in compliance audits and readiness initiatives (SOC 1/2, ISO 27001, ISO 42001, FedRAMP).
• Monitor remediation efforts with stakeholders across geographies/time zones.
• Document gap analyses and remediation progress.
• Help create and maintain information security policies and guidelines.
• Maintain enterprise-wide security controls library and cross-map to control frameworks.
• Work with Legal on security language aligned to security commitments.
• Perform third-party security risk assessments for annual reviews and onboarding.
• Maintain vendor inventory for risk management and audit readiness.

Skills

GRC experience

Security frameworks

Customer-facing communication

Global collaboration

Education

Bachelor's degree or equivalent

Tools

Salesforce familiarity

Security questionnaires

Job description

Certinia is seeking a Security Compliance Analyst to support enterprise-wide security compliance programs across regions. You will assist with customer trust responses, audits, and policy maintenance, collaborating with IT, Legal and Privacy teams.

You will help maintain control frameworks (SOC 1/2, ISO 27001, FedRAMP) and coordinate third-party risk assessments, ensuring evidence is ready for audits and customer inquiries.