Remote Information Security Compliance Analyst — GRC & Controls

Sungrow Na; Northern (KY); Hybrid; USD 110,000 - 135,000; Full time

Job summary

Sungrow North America is seeking an Information Security Compliance Analyst II to join the Information Security organization. You will support the implementation, documentation, validation, and ongoing monitoring of cybersecurity controls across enterprise and product environments.

This hands-on governance, risk, and compliance role requires strong cybersecurity knowledge, evidence management, and policy development, coordinating with leadership and control owners to ensure compliant operations

Qualifications

• 3+ years of professional experience in cybersecurity or information security.
• Experience collecting, analyzing, documenting, or reporting security-related evidence.
• Experience implementing, validating, monitoring, or operating security controls.

Responsibilities

• Support development, implementation, documentation, and maintenance of cybersecurity controls across enterprise and product environments.
• Coordinate with control owners to translate cybersecurity requirements into practical controls and maintain traceability.
• Assist in policy, standards, and procedure governance and in compliance activities.
• Support assessments, audits, and evidence reviews; maintain compliant documentation and remediation tracking.
• Develop repeatable evidence-collection processes and dashboards for governance reporting.

Skills

Governance

Regulatory compliance

Security controls

Evidence management

Policy development

Education

Bachelor's degree in Cybersecurity/Information Security/Information Technology/Computer Science

Job description

Sungrow North America is seeking an Information Security Compliance Analyst II to join the Information Security organization. You will support the implementation, documentation, validation, and ongoing monitoring of cybersecurity controls across enterprise and product environments.

This hands-on governance, risk, and compliance role requires strong cybersecurity knowledge, evidence management, and policy development, coordinating with leadership and control owners to ensure compliant operations