Remote Security Compliance & Regulatory Affairs Analyst

Twilio; United States; On-site; USD 136,000 - 170,000; Full time

Benefits offered by this job

Equity plan

Health care

401(k)

Paid time off

Parental leave

Job summary

Twilio is seeking a regulatory affairs professional to own delegated components of global security regulatory analysis and triage, supporting the SCRA Lead in executing Twilio's regulatory strategy. You will interpret complex frameworks (NIS 2, EU transpositions, TSA UK) and map requirements to control frameworks, delivering regulator-ready artifacts with audit support.

Remote role for a US-based candidate with opportunities to influence Legal, R&D, Security, Product, Sales and Risk teams while

Qualifications

• 5+ years in security compliance or regulatory affairs within a global technology, cloud, or telecom environment.
• Experience interpreting and operationalizing security frameworks and regulations (e.g., NIS 2, ISO 27001, SOC 2).
• Experience mapping regulatory requirements to control frameworks, policies, and technical implementations.
• Broad understanding of security architecture, networking, access control, software development, cryptography, and operations; fluency in how security controls are implemented across apps, systems, and cloud platforms to reduce risk.
• Ability to analyze ambiguous regulations and produce defensible interpretations for leadership decisions.
• Strong written communication skills for audit-ready and regulator-defensible documentation.
• Proven ability to collaborate across Legal, Engineering, Security, Product, Sales, and Risk teams.
• High level of self-sufficiency, critical thinking, and ownership.
• Ability to manage multiple priorities in a global regulatory landscape.

Responsibilities

• Support the SCRA Lead in executing Twilio's security regulatory strategy and long-term planning.
• Independently interpret complex regulatory frameworks (NIS 2, EU transpositions, TSA UK) and provide structured outputs for leadership decisions.
• Maintain regulatory repositories and systems of record with accuracy and audit readiness.
• Execute and improve the Cyber Regulation Intake & Triage process with Legal for lifecycle tracking of obligations.
• Map regulatory requirements to internal control frameworks (e.g., UCF, ISO 27001) and identify gaps.
• Develop regulator-ready artifacts including mappings, narratives, risk statements, and audit support docs.
• Identify regulatory risks and escalate audit obligations for program visibility.
• Collaborate with Legal, Public Policy, R&D, Security, Product, Sales, and Risk to align interpretation with implementation.
• Drive process improvements, tooling enhancements, and automation within the SCRA program.
• Own workstreams end-to-end, aligning to strategic direction set by the SCRA Lead.

Skills

Security compliance

Regulatory interpretation

Audit readiness

Cross-functional collaboration

Self-sufficiency

Ownership

Strategic thinking

Tools

GRC software

Job description

Twilio is seeking a regulatory affairs professional to own delegated components of global security regulatory analysis and triage, supporting the SCRA Lead in executing Twilio's regulatory strategy. You will interpret complex frameworks (NIS 2, EU transpositions, TSA UK) and map requirements to control frameworks, delivering regulator-ready artifacts with audit support.

Remote role for a US-based candidate with opportunities to influence Legal, R&D, Security, Product, Sales and Risk teams while