Security Governance & Risk Compliance Analyst

DeWinter Group; Foster City (CA); Hybrid; USD 120,000 - 180,000; Part time

Job summary

DeWinter Group in Foster City, CA, is seeking a Security Governance Compliance Analyst to strengthen governance, risk, and compliance across a fast-paced environment. The role will lead security audits, perform risk assessments, and maintain documentation to ensure alignment with security policies and frameworks.

You will collaborate with IT, Product Security, and other teams to prioritize risks, develop remediation strategies, and shape effective control environments that support organizational

Qualifications

• 5+ years of experience conducting security control assessments, compliance assessments, or security audits.
• 5+ years working with information security standards and privacy laws (e.g., NIST 800-53, NIST CSF 2.0, ISO 27001, GDPR, CCPA, CPRA).
• Strong knowledge of governance, risk, and compliance frameworks and tools.
• Experience planning and leading organization-wide security audits.
• Ability to coordinate internal and external audits with IT, Product Security, and other teams.

Responsibilities

• Lead security audits and assessments across the organization.
• Conduct risk assessments and support remediation strategies.
• Maintain and review compliance documentation and evidence.
• Coordinate with IT, Product Security, and other teams for audit readiness.
• Develop and maintain security control frameworks and remediation plans.

Skills

Security governance

Compliance assessments

Security audits

Risk assessment

NIST 800-53

ISO 27001

GDPR/CCPA/CPRA

Audit coordination

Policy development

Cross-functional collaboration

Education

Bachelor's degree in CS/IS/Business

Professional security certification (CISA/CISM/CRISC/CISSP)

Equivalent relevant experience

Job description

DeWinter Group in Foster City, CA, is seeking a Security Governance Compliance Analyst to strengthen governance, risk, and compliance across a fast-paced environment. The role will lead security audits, perform risk assessments, and maintain documentation to ensure alignment with security policies and frameworks.

You will collaborate with IT, Product Security, and other teams to prioritize risks, develop remediation strategies, and shape effective control environments that support organizational