ISO Compliance Analyst | Audits, Risk & Improvement

Nextbridge; Irving (TX); On-site; USD 60,000 - 90,000; Full time

Job summary

Nextbridge is seeking a Compliance Analyst to support internal audits, compliance activities, evidence reviews, and ongoing process improvement within a software organization.

The role involves planning and conducting audits against ISO 27001:2022 and ISO 9001:2015, reviewing policies and records, identifying nonconformities, and supporting risk assessments and external certification efforts. Strong documentation and communication skills are essential.

Qualifications

• Bachelor's degree in IT, Computer Science, Software Engineering, or related field.
• 1–2 years of ISO, internal audits, compliance or information security.
• Working knowledge of ISO 27001:2022 and ISO 9001:2015.
• Informal audits related to organizational infrastructure.
• Basic understanding of information security, risk management, and software/IT processes.
• Strong analytical, documentation, communication, and interpersonal skills.
• SOC2 knowledge is a plus.

Responsibilities

• Assist in planning and conducting internal audits against ISO 27001:2022 and ISO 9001:2015.
• Review policies, procedures, records, and audit evidence for compliance.
• Identify and document nonconformities, observations, and improvement opportunities.
• Follow up on corrective actions and verify their implementation.
• Support risk assessments, compliance tracking, and management reviews.
• Assist departments in preparing evidence for external certification/surveillance audits.
• Conduct audits of software development, SQA, IT, HR, Operations, and other business processes.
• Maintain audit reports, checklists, and compliance documentation.

Skills

ISO 27001

ISO 9001

Audit planning

Information security

Risk management

Analytical skills

Communication

Education

Bachelors in IT/CS/SWE

Tools

GRC tools

Excel

Job description

Nextbridge is seeking a Compliance Analyst to support internal audits, compliance activities, evidence reviews, and ongoing process improvement within a software organization.

The role involves planning and conducting audits against ISO 27001:2022 and ISO 9001:2015, reviewing policies and records, identifying nonconformities, and supporting risk assessments and external certification efforts. Strong documentation and communication skills are essential.