Sr. Compliance Analyst

Ladders; United States; Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Flexible time off

Medical, dental, and vision plans

401(k) with company match

Well-being programs

Job summary

The client is seeking a Sr. Compliance Analyst to lead an organization-wide ISO/IEC 27001:2022 compliance program. This remote role partners with key stakeholders to close gaps, drive remediation, and keep the company audit-ready, shaping governance, risk, and compliance practices for successful certification outcomes.

Location: Remote. Compensation: $120,000 – $140,000 annually. The role emphasizes building a robust ISMS, managing audits, and coordinating with external entities to ensure

Qualifications

• 5+ years in governance, risk, and compliance (GRC) or information security compliance.
• Proven experience leading ISO/IEC 27001 implementation and certification.
• Strong knowledge of ISO/IEC 27001:2022 requirements and ISMS operations.
• Experience with external certification audits and evidence management.
• Hands-on experience with GRC automation platforms like Drata.
• Excellent project management and organizational skills.
• ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred.

Responsibilities

• Lead the implementation and certification of an ISO/IEC 27001:2022 program.
• Develop and manage implementation plans and stakeholder responsibilities.
• Conduct gap assessments and coordinate remediation activities.
• Establish and maintain ISMS scope and objectives.
• Coordinate external certification audits and maintain audit readiness.
• Conduct information security risk assessments and maintain risk registers.
• Develop and maintain information security policies and ISMS documentation.

Skills

GRC experience

ISO 27001 knowledge

ISMS management

Audit readiness

Project management

Risk assessment

Stakeholder collaboration

Tools

Drata

Job description

For our client, we are seeking a Sr. Compliance Analyst to join the team of a leader in the Information Technology space.

This role will lead a company-wide ISO/IEC 27001:2022 compliance program, with a strong focus on building and maintaining a robust information security management system. The position will partner closely with internal stakeholders to assess gaps, drive remediation, and keep the organization audit-ready. It is an opportunity to shape governance, risk, and compliance practices that support security, operational discipline, and successful certification outcomes.

Location: Remote

Compensation: $120,000 – $140,000 annually

Responsibilities

• Lead the implementation and certification of an ISO/IEC 27001:2022 program
• Develop and manage implementation plans and stakeholder responsibilities
• Conduct gap assessments and coordinate remediation activities
• Establish and maintain ISMS scope and objectives
• Coordinate external certification audits and maintain audit readiness
• Conduct information security risk assessments and maintain risk registers
• Develop and maintain information security policies and ISMS documentation

Qualifications

• 5+ years in governance, risk, and compliance (GRC) or information security compliance
• Proven experience leading ISO/IEC 27001 implementation and certification
• Strong knowledge of ISO/IEC 27001:2022 requirements and ISMS operations
• Experience with external certification audits and evidence management
• Hands-on experience with GRC automation platforms like Drata
• Excellent project management and organizational skills
• ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred

Benefits

• Flexible time off and comprehensive medical, dental, and vision plans
• 401(k) retirement savings plan with company match
• Health savings account with company contributions
• Life, accident, and disability coverage
• Employee assistance programs and well-being benefits

Our client is an equal opportunity employer.