[Remote] Staff Compliance Analyst

Note: The job is a remote job and is open to candidates in USA. ServiceNow’s Security Organization is hiring a Staff Compliance Analyst to help execute its certification strategy and maintain and expand third-party assurance programs. The role monitors and tests security controls, supports audits and risk assessments, and works with Sales, Security, Operations, and customers on compliance matters.

Responsibilities

• Perform activities to help measure and monitor compliance with company policies and procedures
• Facilitate certifier requests and information gathering for external and internal audits
• Lead onsite and remote audits – both certification and customer audits
• Conduct activities to comply with the various Government Cyber Security requirements within EMEA
• Successfully drive security compliance testing activities across various teams within the organisation
• Liaise with Risk Management and conduct security risk assessment activities
• Help our customers understand ServiceNow’s security and compliance control environment
• Contribute towards enhancing the GRC tool and processes to meet compliance business needs

Skills

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry
• 8+ years working in the field of cyber security compliance, security risk or audit or similar experience plus education
• Direct and recent working experience with at least three of the following compliance programs: ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX & C5 in Germany, and/or SOC2
• Prior experience working in the Security and Compliance group at a SaaS/Cloud company or with Security and Risk practice of a Big Four firm
• Demonstrated experience working in large projects
• Experience using a GRC system
• Excellent report writing skills, ability to prepare compliance reports and associated metrics
• Excellent verbal and written communication skills
• Be able to work effectively with other members of the GRC organization to drive results
• Relevant professional certifications such as CISSP, CISA, CISM are desirable

Benefits

• Remote work

Company Overview

Company H1B Sponsorship