Negotiable
Undetermined
Remote
Remote
Summary: The Compliance Analyst role involves supporting risk management activities related to compliance frameworks such as IRAP and FedRAMP. The position requires the candidate to assist in audits, vendor risk assessments, and compliance advisory functions while working remotely. The ideal candidate should have a strong understanding of compliance frameworks and a proactive approach to process improvement. This role is essential for ensuring adherence to security and privacy standards within the organization.
Key Responsibilities:
- Assist with internal and external audits and assessments, including control assessment, monitoring, and reporting.
- Work with internal teams and external parties to define and prioritize remediation efforts, tracking activities, and validating solutions.
- Perform compliance advisory functions across various business areas.
- Support ongoing activities related to IRAP, FedRAMP, and other compliance frameworks.
- Conduct vendor and partner risk assessments and customer assurance efforts.
- Continuously seek innovative ways to automate or improve compliance processes.
Key Skills:
- 3+ years of experience with compliance frameworks including IRAP, FedRAMP, NIST, and CMMC.
- Experience in program or project management, auditing, and control framework development.
- Technical understanding of Windows, Linux, Apple operating systems, networks, and cloud infrastructure.
- Excellent communication skills for cross-team collaboration.
- Prior experience writing system security plans or authorization documentation is a bonus.
- Ability to think strategically about risks and their organizational impact.
- Experience with cloud environments and Apptio products is a plus.
Salary (Rate): £36
City: undetermined
Country: undetermined
Working Arrangements: remote
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Job Title: Compliance Analyst Location: Remote Duration: 6-12 months (with possibility of Extension)
Required skills:
IRAP experience mandatory and should be clearly listed on resume with their experience. Please do not send anyone who does not have this experience on their resume.
Job Description:
What You'll Do: This role covers audit, compliance, vendor risk, and customer assurance functions in the context of security and privacy within our Australian IRAP, US FedRAMP or another program such as:
Assisting with internal and external audits and assessments including control assessment, monitoring, and reporting including collection and organization of evidence
Working with various internal teams or external parties to define and prioritize remediation efforts, tracking remediation activities, and inspecting/validating solutions that have been implemented
Performing other duties within the scope of governance, risk, and compliance as needed.
What You'll Need:
3+ years of working experience on different compliance frameworks, including Australian Signals Directorate, Australian IRAP, US FedRAMP, NIST, US DoD Cloud Computing Security Requirements Guide (SRG), CMMC, and other emerging standards.
Experience in program or project management, auditing, and/or control framework development and implementation.
Fundamental technical understanding of key technologies such as Windows, Linux, and Apple operating systems, networks, application development, databases, virtualization, and cloud infrastructure
Excellent communication skills to work across teams within Apptio successfully.
Bonus Points:
Prior writing of system security plans (SSPs) or authorization documentation for federal platforms. Check Point Threat Extraction secured this document Get Original
Ability to think strategically about risks and tie those risks to tactical organizational activities.
Experience with a cloud environment and the Apptio products or services.
Open to learning and working on new domains and technology