Senior Information Security & Compliance Lead

Referral Board; United States; On-site; USD 133,100 - 210,600; Full time

Benefits offered by this job

Stock program

401(k) matching

Health coverage

Vacation days

Volunteer time

Parental leave

Job summary

Elastic, the Search AI Company, seeks a Senior Information Security Analyst to join the Infosec organization in the United States. You will lead and coordinate compliance programs across SOC 2, ISO 27001, PCI DSS, FedRAMP, and TISAX, working with Engineering, Product, Legal, IT, and Security to translate regulatory obligations into practical, repeatable processes.

This role emphasizes audits, governance improvements, and a scalable security awareness program with opportunities to modernize

Qualifications

• Experience leading compliance audits and certification programs in a cloud-native or SaaS environment (e.g., SOC 2, ISO 27001, PCI DSS, FedRAMP, UK Cyber Essentials Plus, TISAX).
• Experience managing or supporting a security awareness and education program.
• Strong organizational skills to prioritize multiple initiatives independently.
• Ability to translate complex compliance requirements into practical guidance for technical and business stakeholders.
• Excellent collaboration and cross-functional partnership skills.

Responsibilities

• Lead and coordinate compliance programs supporting industry and regulatory frameworks (SOC 2, ISO 27001, PCI DSS, FedRAMP, TISAX, etc.).
• Plan, manage, and execute internal and external audits with stakeholders to ensure evidence collection and control validation.

Skills

SOC 2

ISO 27001

PCI DSS

FedRAMP

TISAX

Security awareness program

AI governance

Audit management

Tools

AI governance

Job description

Elastic, the Search AI Company, seeks a Senior Information Security Analyst to join the Infosec organization in the United States. You will lead and coordinate compliance programs across SOC 2, ISO 27001, PCI DSS, FedRAMP, and TISAX, working with Engineering, Product, Legal, IT, and Security to translate regulatory obligations into practical, repeatable processes.

This role emphasizes audits, governance improvements, and a scalable security awareness program with opportunities to modernize