Security & Compliance Analyst

Bloomreach; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible hours

Virtual-first with Bloomreach Hubs

5 paid volunteering days off

Stock options

Company performance bonus

Referral bonus up to $3,000

DisConnect days

Job summary

Bloomreach is seeking a Security & Compliance Analyst to join the Governance, Risk, and Compliance team. You will help maintain compliance activities, resolve issues, and support engineering and sales with customer requirements, protecting the trust of hundreds of millions of online shoppers.

You’ll participate in audits, policy updates, training programs, and regional communications across EMEA and the US, while staying current with evolving regulations shaping SaaS security and data privacy.

Qualifications

• Knowhow of industry compliance requirements and standards.
• Understanding SaaS business operation and IT governance.
• Experience with ISO security standards or willingness to learn.
• Strong written and verbal communication with stakeholders.
• Experience with SOC 2 audits or similar.

Responsibilities

• Assist periodic audits and prepare compliance reports.
• Investigate issues, document findings, and implement actions.
• Complete security/compliance sections of RFPs and customer questionnaires.
• Keep policies and documentation up to date.
• Lead the security training program.
• Maintain process maps and org charts.
• Update compliance policies and docs.
• Research regulations, standards, and industry developments.
• Communicate regulations to internal and external stakeholders.
• Prepare management review materials.
• Coordinate with clients across regions (EMEA and US).

Skills

Compliance knowledge

SaaS understanding

IT Governance, Risk & Compliance

Clear communication

Compliance experience

Analytical skills

Research skills

ISO/SOC2 familiarity

Job description

Bloomreach is building the world’s premier agentic platform for personalization.We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey.

• We’re taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses.
• We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey.
• We’re designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do.

And we’re building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn’t only autonomous…it’s also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora.

Security & Compliance Analyst

Become a Security & Compliance Analyst at Bloomreach. You will join our Governance, Risk, and Compliance team and help maintain our compliance activities, resolve compliance-related issues, and support engineering and sales teams with customer requirements. Bloomreach provides the best digital experience for leading international e-commerce companies, and your work will help protect the trust of hundreds of millions of consumers who shop online.

Your tasks and responsibilities

As a Security & Compliance Analyst, you will:

• Support periodic audits of company procedures and processes, and help prepare reports on compliance.
• Investigate compliance issues, document findings, and support the implementation of appropriate actions.
• Support the sales process by completing security and compliance sections of RFPs and customer questionnaires.
• Help ensure that policies, standards, and related documentation are reviewed and kept up to date.
• Lead the security training program.
• Maintain process mapping and the responsibilities structure chart.
• Support updates to compliance policies and related documentation.
• Research relevant regulations, standards, and industry developments to support the team’s work.
• Help communicate applicable regulations and compliance requirements to internal and external stakeholders.
• Assist with the preparation of management reviews and supporting materials.
• Communicate with clients across different regions, including EMEA and the US.

What we expect from you

• Working knowledge of relevant industry compliance requirements and standards.
• A good understanding of SaaS businesses and how they operate.
• A good understanding of Governance, Risk, and Compliance in an IT environment.
• Clear written and verbal communication skills, with the ability to work effectively with different stakeholders.
• Previous experience as a compliance analyst, security analyst, compliance officer, or in a similar role.
• Good analytical and problem-solving skills.
• Effective research and documentation skills.
• The ability to organise your work and manage competing priorities.
• Experience with ISO security standards or a willingness to develop your knowledge in this area.
• Exposure to SOC 2 audits or similar compliance assessments

#LI-HO1

The pay range actually offered will take into account a variety of potential factors considered in compensation, including but not limited to skills, qualifications, geographic location, accomplishments, experience, credentials, internal equity and business needs, and may vary from the range listed above.

Base Salary Range

845 714 Kč—1 057 143 Kč CZK

More things you’ll like about Bloomreach:

Culture:

A great deal of freedom and trust. At Bloomreach we don’t clock in and out, and we have neither corporate rules nor long approval processes. This freedom goes hand in hand with responsibility. We are interested in results from day one.

We have defined our 5 values and the 10 underlying key behaviors that we strongly believe in. We can only succeed if everyone lives these behaviors day to day. We’ve embedded them in our processes like recruitment, onboarding, feedback, personal development, performance review and internal communication.

We believe in flexible working hours to accommodate your working style.

We work virtual-first with several Bloomreach Hubs available across three continents.

We organize company events to experience the global spirit of the company and get excited about what’s ahead.

We encourage and support our employees to engage in volunteering activities - every Bloomreacher can take 5 paid days off to volunteer*.

Personal Development:

We have a People Development Program - participating in personal development workshops on various topics run by experts from inside the company. We are continuously developing & updating competency maps for select functions.

Our resident communication coach Ivo Večeřa is available to help navigate work-related communications & decision-making challenges.*

Our managers are strongly encouraged to participate in the Leader Development Program to develop in the areas we consider essential for any leader. The program includes regular comprehensive feedback, consultations with a coach and follow-up check-ins.

Well-being:

The Employee Assistance Program – with counselors – is available for non-work-related challenges.*

Subscription to Calm - sleep and meditation app.*

We organize ‘DisConnect’ days where Bloomreachers globally enjoy one additional day off each quarter, allowing us to unwind together and focus on activities away from the screen with our loved ones.

We facilitate sports, yoga, and meditation opportunities for each other.

Compensation:

Restricted Stock Units or Stock Options are granted depending on a team member’s role, seniority, and location.*

Everyone gets to participate in the company’s success through the company performance bonus.*

We offer an employee referral bonus of up to $3,000!

We reward & celebrate work anniversaries – Bloomversaries!*

Any unsolicited resumes/candidate profiles submitted through our website or to personal email accounts of employees of Bloomreach are considered property of Bloomreach and are not subject to payment of agency fees.

#LI-Remote