Security Compliance Analyst - Privacy & Audits, Equity

Deploy; San Francisco (CA); On-site; USD 110,000 - 140,000; Full time

Job summary

Deploy is seeking a Security Compliance Analyst in San Francisco to lead risk governance and audit efforts. You will work with engineers and auditors to meet security controls, manage audits, and drive a comprehensive GRC program across the company.

The role emphasizes privacy, regulatory alignment, and continuous improvement in security practices. Ideal candidates have 4+ years in risk-based assessments, ISO 27001 or SOC audits, and strong communication across technical and non-technical teams.

Qualifications

• Bachelor's degree or related experience.
• Minimum 4+ years experience conducting risk-based assessment for information systems/operations.
• Minimum 1+ years experience running a governance, risk and compliance program.
• Minimum 2+ years experience leading ISO 27001 or SOC 1/2 audits.
• Strong knowledge of privacy laws (CCPA/CPRA, GDPR).
• Ability to communicate to technical and non-technical audiences.

Responsibilities

• Manage Deploy's risk management program.
• Manage audits and regulatory reviews with accuracy and adherence to expectations.
• Implement ISMS with executive and mid-level management.
• Contribute to a comprehensive Governance, Risk and Compliance program.
• Collaborate with Engineering and Product to improve change and access controls.

Skills

Communication

Self-motivation

Team player

Detail-oriented

Organized

Prioritization

Education

Bachelor's degree

Job description

Deploy is seeking a Security Compliance Analyst in San Francisco to lead risk governance and audit efforts. You will work with engineers and auditors to meet security controls, manage audits, and drive a comprehensive GRC program across the company.

The role emphasizes privacy, regulatory alignment, and continuous improvement in security practices. Ideal candidates have 4+ years in risk-based assessments, ISO 27001 or SOC audits, and strong communication across technical and non-technical teams.