Senior Compliance Analyst I (UK)

AuditBoard has surpassed $300M ARR and is the leading audit, risk, ESG, and InfoSec platform on the market. More than 50% of the Fortune 500, including 7 of the Fortune 10, rely on our award‑winning technology to move their businesses forward with greater clarity and agility. We inspire each other to innovate and are proud of what we are producing. We spend each day thinking of new ways to help our customers and contribute to the greater good of our company and our surrounding communities.

Key Responsibilities:

• Participate in maintaining and evolving the compliance program framework, including designing and developing policies, standards, and procedures.
• Facilitate and perform 2nd Line of Defense control testing and validation.
• Facilitate compliance operations including User Access Reviews, Due Diligence Questionnaires, and Issues Management.
• Consult with cross‑functional and security teams to implement policies and procedures as well as assess data privacy and security risks to mitigate potential compliance issues.
• Contribute to the maintenance and continuous improvement of the overall security compliance posture of AuditBoard.
• Interface and collaborate with security and legal teams on compliance issues.
• Participate in security compliance assessments.
• Assist in providing responses to customer and vendor questionnaires.
• Facilitate training, awareness, and communication of security and compliance matters across AuditBoard.
• Participate in developing and delivering training programs on security awareness, data handling/protection, and privacy.
• Work globally and cross‑functionally to translate compliance requirements and principles into a set of common controls and practices.

Attributes of a Successful Candidate:

• 3+ years of experience as a security compliance professional with an in depth understanding of control objectives, procedures, compliance gap assessments, and evidence collection covering ISO 27001 / 27002, NIST CSF, NIST 800‑53, CMMC / NIST 800‑171, SOC1 / SOC2, FedRAMP, and common industry standards.
• Experience in a B2B SaaS organization.
• Knowledge and experience with compliance automation tooling and practices / SQL.
• Bachelor's degree.
• Ability and desire to learn new technologies and data flows quickly to help assess security risks and develop appropriate risk mitigation elements.
• Ability to translate and distill laws and regulatory requirements and legal advice into operational control procedures and policies and provide practical guidance to business units and functions on those requirements.
• Ability to collect, describe, and display technical information in a way to help decision‑making.
• Participate in industry security organizations and associations to learn emerging trends and best practices.
• Experience collaborating among cross‑functional and global teams with the ability to drive and manage multiple simultaneous projects.
• Experience developing security and ELC controls and communicating them to business stakeholders.
• Excellent verbal and written communication skills.
• Relevant privacy and security certifications such as CISSP, CISM, CISA.

Our Company Values:

• Customer obsession: apply relentless focus on listening to and understanding customers as the core of everything we do.
• Win, together: drive to be the best while supporting each other’s success.
• Gritty resilience: thrive in a fast‑paced and dynamic environment, balancing immediate priorities with big‑picture strategic goals.
• Personal improvement: stay eager to share insights, seek feedback, and continuously learn.
• Constant innovation: challenge the status quo and drive improvements.

Perks:

• Launch a career at one of the fastest‑growing SaaS companies in North America.
• Live your best life (LYBL)! $200/mo for anything that enhances your life.
• Comprehensive employee health coverage (all locations).
• 401K with match (US) or pension with match (UK).
• Competitive compensation & bonus program.
• Flexible vacation (US exempt & CA) or 25 days (UK).
• Time off for your birthday & volunteering.
• Employee resource groups.
• Opportunities for team and company‑wide get‑togethers.

Background checks are required. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for employers and the California Fair Chance Act. This role may have access to highly sensitive data, including employee data, customer data, company financials, and proprietary product information.