Senior Cloud Compliance & Risk Analyst (Remote)

Servicenow; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

ServiceNow is seeking a Staff Compliance Analyst to define and execute our cloud security and compliance strategy. You will lead audits, drive testing, and coordinate with risk, security, and operations teams to ensure rigorous controls across our platform.

With 8+ years in cyber security compliance and experience with multiple programs, you will help customers understand our controls and scale compliance using modern GRC tools and AI-driven approaches.

Qualifications

• AI integration into work processes, decision-making, or problem-solving.
• 8+ years in cyber security compliance, security risk, or audit with related education.
• Direct experience with ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX & C5, or SOC2.
• Experience in SaaS/Cloud security/compliance environments.
• Certifications such as CISSP, CISA, CISM are desirable.

Responsibilities

• Measure and monitor compliance with company policies and procedures.
• Facilitate certifier requests and information gathering for audits.
• Lead onsite and remote audits - certification and customer audits.
• Conduct activities to comply with government cyber security requirements where applicable.
• Drive security compliance testing across cross-functional teams.
• Collaborate with Risk Management on security risk assessments.
• Help customers understand ServiceNow's security and compliance controls.
• Contribute to enhancing GRC tools and processes.

Skills

AI integration

Security compliance

Auditing

Risk assessment

Education

CISSP

CISA

CISM

Tools

GRC systems

Job description

ServiceNow is seeking a Staff Compliance Analyst to define and execute our cloud security and compliance strategy. You will lead audits, drive testing, and coordinate with risk, security, and operations teams to ensure rigorous controls across our platform.

With 8+ years in cyber security compliance and experience with multiple programs, you will help customers understand our controls and scale compliance using modern GRC tools and AI-driven approaches.