Senior Security & Compliance Lead – AI Governance & Cloud

Energy Exemplar Pty Ltd; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Energy Exemplar is seeking a Sr. Security & Compliance Analyst to advance security, risk, compliance, vulnerability management, and AI governance across cloud and enterprise operations.

Reporting to the VP, Cloud Operations & GRC, you will help implement and improve ISO 27001, SOC 1/2, and privacy controls. You will collaborate with Engineering, IT, and Product teams, monitor threats and regulatory changes, and respond to customer due diligence requests.

Qualifications

• 6–8 years governance, risk and compliance experience in security.
• Knowledge of ISO 27001, SOC 1/SOC 2, GDPR and privacy principles.
• Experience with vulnerability remediation, audit support and executive reporting.
• Familiarity with AI governance and privacy/security frameworks.

Responsibilities

• Support ISO 27001, SOC 1, SOC 2, privacy and AI governance requirements.
• Coordinate vulnerability remediation across Engineering, Cloud Operations, IT, and Product teams.
• Track security metrics, MTTR, overdue vulnerabilities, remediation trends and dashboards.
• Follow up on unresolved vulnerabilities, audit findings and compliance gaps.
• Support third-party risk management, policy management and access reviews.
• Respond to customer due diligence requests, audits and questionnaires.
• Evaluate AI-enabled solutions for security, privacy and responsible AI considerations.

Skills

GRC & Cybersecurity

ISO 27001

SOC 1 / SOC 2

Vulnerability management

AI governance

Tools

Security monitoring tools

Compliance frameworks

Job description

Energy Exemplar is seeking a Sr. Security & Compliance Analyst to advance security, risk, compliance, vulnerability management, and AI governance across cloud and enterprise operations.

Reporting to the VP, Cloud Operations & GRC, you will help implement and improve ISO 27001, SOC 1/2, and privacy controls. You will collaborate with Engineering, IT, and Product teams, monitor threats and regulatory changes, and respond to customer due diligence requests.