Senior Security Compliance Analyst

Title: Senior Security Compliance Analyst Location: Burlington, MA | Hybrid

What We Need

We're looking for a Senior Security & Compliance Analyst to help build and scale a security and compliance program for our SaaS environment. You'll lead key workstreams, including risk management, control testing, and audit readiness, while partnering with engineering, legal, and the business to embed compliance into how we operate. You'll help define policies, align our program with frameworks like SOC 2, ISO 27001, and NIST, and strengthen our security posture through automation and continuous monitoring.

What You'll Do

Security Program & Compliance

• Help build and scale our SaaS security and compliance program, aligned to frameworks such as SOC 2, ISO 27001, NIST, and GDPR.
• Define and implement security policies, standards, and controls that meet regulatory and business requirements.

Risk Management & Audits

• Lead risk management efforts, including third-party risk assessments, control testing, and gap analysis.
• Drive audit readiness, coordinating evidence collection and remediation for internal and external audits.

Cross-Functional Partnership

• Embed security and compliance requirements into engineering, infrastructure, and operational workflows.
• Partner with engineering, legal, and business teams to align on security and compliance goals.

Security Engineering & Continuous Improvement

• Work with engineering to implement technical safeguards (access controls, logging, encryption) and automate compliance processes.
• Monitor evolving threats and regulations, and proactively strengthen our security posture.

What You Bring

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
• 4+ years of experience in information security, compliance, or a related technical role.
• Strong knowledge of security frameworks and regulations, such as ISO 27001, SOC 2, NIST, PCI-DSS, HIPAA, and GDPR.
• Hands-on experience with cloud environments (AWS, Azure, or GCP) and their security services.
• Familiarity with auditing, logging, monitoring, and vulnerability management tools, including SAST, DAST, and SCA.
• Experience with compliance automation tools, such as Terraform, Cloud Custodian, or other compliance-as-code frameworks.
• Background in DevSecOps or secure software development practices is a plus.
• Security certifications (CISSP, CISM, CISA, CCSK, or equivalent) preferred.
• Excellent documentation, communication, and collaboration skills.
• Manual Dexterity: Repetitive motion of wrists, hands and fingers for using a computer.
• Stationary Tasks: Sitting for extended periods, remaining in a stationary position.

What We Offer

Our comprehensive compensation package is vital in how we recognize our people for the impact they make on us reaching our goals as a company.

For this role, the estimated base is $140,000 - $180,000 + Bonus. The actual salary may vary based on a range of factors, including market and individual qualifications objectively assessed during the interview process.

The range listed above is a guideline and may be modified. People Experience offers a comprehensive benefits package in addition to cash compensation that includes but is not limited to 401k and medical/dental coverage. Speak with your Recruiter for more details on our Total Rewards philosophy.
#LI-BW1