Senior Security & Compliance Analyst

Energy Exemplar Pty Ltd; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Energy Exemplar is seeking a Sr. Security & Compliance Analyst to advance security, risk, compliance, vulnerability management, and AI governance across cloud and enterprise operations.

Reporting to the VP, Cloud Operations & GRC, you will help implement and improve ISO 27001, SOC 1/2, and privacy controls. You will collaborate with Engineering, IT, and Product teams, monitor threats and regulatory changes, and respond to customer due diligence requests.

Qualifications

• 6–8 years governance, risk and compliance experience in security.
• Knowledge of ISO 27001, SOC 1/SOC 2, GDPR and privacy principles.
• Experience with vulnerability remediation, audit support and executive reporting.
• Familiarity with AI governance and privacy/security frameworks.

Responsibilities

• Support ISO 27001, SOC 1, SOC 2, privacy and AI governance requirements.
• Coordinate vulnerability remediation across Engineering, Cloud Operations, IT, and Product teams.
• Track security metrics, MTTR, overdue vulnerabilities, remediation trends and dashboards.
• Follow up on unresolved vulnerabilities, audit findings and compliance gaps.
• Support third-party risk management, policy management and access reviews.
• Respond to customer due diligence requests, audits and questionnaires.
• Evaluate AI-enabled solutions for security, privacy and responsible AI considerations.

Skills

GRC & Cybersecurity

ISO 27001

SOC 1 / SOC 2

Vulnerability management

AI governance

Tools

Security monitoring tools

Compliance frameworks

Job description

About Energy Exemplar

In an era where the world is rapidly advancing towards a cleaner future through decarbonization, Energy Exemplar’s mission lies in ‘Empowering Transformative Energy Decisions’. Founded in 1999 in Adelaide, Australia, our award-winning software portfolio encompassing the modeling and simulation platform PLEXOS®, Aurora, and Adapt2, is trusted by innovative organizations across the globe. Through our technology and people, we strive to enable stakeholders from across the entire energy value chain to revolutionize the energy ecosystem and to collaboratively plan and execute for a sustainable energy future with unprecedented clarity, speed, and innovation.

Our impact is global and is being recognized across the industry. Some of our recent accolades include:

• SaaS Company of the Year (2025) – Global Business Tech Awards.
• Environmental Impact Award (2025) – E+E Leaders Awards.
• IPPAI (Independent Power Producers Association of India) Power Awards (2025) - Winners
• Finalist: Platts Global Energy Awards (2024) – Grid Edge category
• Finalist: Reuters Global Energy Transition Awards (2024) – Technologies of Change
• Top 50 Marketing Team (2024) – Voted by the public at the ICON Awards.

How We Work

Energy Exemplar is growing fast around 30% year on year and, that growth is driven by how we work. We trust our team to deliver great results from wherever they work best, whether that’s at home, in the office, or on the move.

We’re a global team that values ownership, integrity, and innovation. You’ll be supported to balance work and life in a way that works for you, and empowered to take initiative, solve problems, and make an impact, regardless of your background, location, or role.

Our four core values, Customer Success, One Global Team, Integrity & Ownership, and Innovation Excellence aren’t just words. They show up in how we collaborate, how we solve, and how we grow together.

About the Position

Reporting to the VP, Cloud Operations & GRC, the Sr. Security & Compliance Analyst will support the execution and continuous improvement of Energy Exemplar’s security, risk, compliance, vulnerability management, and AI governance programs across cloud and enterprise operations.

Responsibilities:

• Support security and compliance programs aligned with ISO 27001, SOC 1, SOC 2, privacy, and emerging AI governance requirements.
• Coordinate and drive vulnerability remediation activities across Engineering, Cloud Operations, IT, and Product teams to ensure remediation within defined EE SLAs.
• Track and report security metrics, including MTTR, overdue vulnerabilities, remediation trends, audit findings, and compliance dashboards.
• Proactively follow up and elevate unresolved vulnerabilities, audit findings, and compliance gaps.
• Support continuous control monitoring, risk assessments, third-party risk management, policy management, access reviews, and audit activities.
• Respond to customer security and compliance due diligence requests, audits, and questionnaires.
• Support AI governance, security, and compliance initiatives, including assessment of AI-related risks, emerging regulations, and industry standards (e.g., ISO 42001, EU AI Act, privacy requirements).
• Assist in evaluating AI-enabled solutions and third-party AI services for security, privacy, compliance, and responsible AI considerations.
• Monitor emerging cybersecurity threats, privacy regulations, and industry compliance requirements.
• Collaborate with cross-functional teams to drive remediation and continuous improvement initiatives.

Qualifications:

• 6–8 years of experience in Governance, Risk & Compliance (GRC), cybersecurity, information security, or risk management.
• Strong understanding of ISO 27001, SOC 1 / SOC 2, GDPR/privacy principles, vulnerability management, and security controls.
• Experience in Energy / Utilities sector security and compliance requirements (e.g., CEII or critical infrastructure requirements)
• Experience coordinating vulnerability remediation programs, tracking SLA compliance, MTTR metrics, and executive reporting.
• Experience supporting audits, customer security reviews, and compliance programs.
• Familiarity with emerging AI governance, privacy, and security frameworks (e.g., ISO 42001, EU AI Act, responsible AI principles) preferred.
• Strong communication, organizational, stakeholder management, and follow-up skills.
• Ability to work independently and proactively drive outcomes across distributed teams.

Preferred Certifications:

• CISSP, CISA, ISO 27001 Lead Implementer/Auditor, or similar certifications.
• AI governance/privacy certifications are a plus.

Energy Exemplar is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. We welcome applications from people of all backgrounds, experiences, identities, and abilities. Please let us know if you require accommodations at any stage of the recruitment process—we’re here to support you in showcasing your full potential.

Energy Exemplar respects your privacy and is committed to protecting the personal data you share during the recruitment process. This Candidate Privacy Notice explains how we collect, use, and protect your personal information when you apply for a role with us.