Accela - Sr. Compliance Analyst
Requirements
• 5+ years of experience in governance, risk and compliance (GRC), information security compliance, security assurance, or a related field. • Demonstrated experience leading or substantially owning an ISO/IEC 27001 implementation and certification effort. • Strong knowledge of ISO/IEC 27001:2022 requirements, ISMS operations, risk assessment, risk treatment, control implementation, and audit processes. • Experience preparing for and coordinating external certification audits, including evidence management and remediation of findings. • Experience developing and maintaining compliance policies, procedures, risk assessments, and control documentation. • Hands-on experience with a GRC or compliance automation platform, such as Drata or a comparable solution. • Strong project management, analytical, and organizational skills, with the ability to independently manage complex initiatives and competing priorities. • Excellent communication and stakeholder management skills, including the ability to translate technical requirements into actionable business processes. • Ability to influence and drive accountability across cross-functional teams without direct reporting authority. • ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or comparable professional certification. • Working knowledge of SOC 2 Type II, GovRAMP, NIST SP 800-53, CIS Controls, or PCI DSS. • Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent practical experience. • Experience supporting GRC programs within a SaaS, cloud technology, or enterprise software environment. • Familiarity with AWS or comparable cloud environments and associated security controls. • Experience leveraging compliance automation platforms and integrating requirements across multiple compliance frameworks. • OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSIONAccela believes in developing and nurturing a workplace community where our differences are celebrated, and everyone feels a sense of psychological safety and belonging. Accela is committed to putting resources and attention towards evolving our practices, policies, and philosophies to enable diversity to thrive and to support equity in opportunity for everyone. • OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION • COMPENSATION AND WELL-BEINGThe annual base salary range for this full-time position is $120,000-$140,000 (less applicable taxes). The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience. In addition to an annual base salary, this position is eligible for an annual bonus target. This is a discretionary bonus awarded based on company and individual goal achievement. Accela’s U.S. team members will receive a generous benefits package consisting of options including flexible time off, comprehensive medical, dental, and vision plans, family planning benefits, 401(k) retirement savings plan with company match, health savings account with company contributions, flexible spending account, life, accident, and disability coverage, business travel insurance, employee assistance programs, and other well-being benefits.
Responsibilities
• ISO 27001 Implementation & Certification • Lead the end-to-end implementation and certification of Accela's ISO/IEC 27001:2022 program. • Develop and manage implementation plans, milestones, deliverables, and stakeholder responsibilities. • Conduct gap assessments, identify compliance requirements, and coordinate remediation activities. • Establish and maintain the ISMS scope, objectives, and Statement of Applicability (SoA). • Coordinate external certification audits, including preparation, evidence collection, stakeholder interviews, and remediation of findings. • Maintain certification readiness and coordinate ongoing surveillance and recertification audits. • Monitor progress, risks, and dependencies, providing regular updates to the GRC Manager. • ISMS Risk Management & Controls • Conduct and maintain information security risk assessments, risk registers, and risk treatment plans. • Partner with control owners to implement, assess, document, and monitor applicable ISO 27001 controls. • Evaluate control effectiveness, identify gaps, and track remediation through completion. • Coordinate internal audits, management reviews, corrective actions, and continual improvement activities. • Monitor organizational and regulatory changes that may affect ISMS requirements and compliance obligations. • Policies, Documentation & Compliance Operations • Develop and maintain information security policies, procedures, standards, and supporting ISMS documentation. • Establish processes for documentation management, control assessments, evidence collection, and ongoing compliance monitoring. • Ensure required documentation and records are accurate, current, appropriately approved, and audit-ready. • Integrate ISO 27001 requirements into existing business processes while leveraging established controls and documentation. • GRC Platform & Evidence Management • Maintain ISO 27001 requirements, controls, risks, evidence, and remediation activities within Accela's GRC platform, including Drata. • Map existing controls and evidence to ISO 27001 requirements, identifying opportunities to streamline compliance activities. • Establish control ownership, evidence requirements, and ongoing monitoring processes. • Leverage automation to improve evidence collection, reporting, and audit readiness. • Cross-Functional Collaboration & Reporting • Partner with Information Security, IT, Engineering, HR, Legal, Finance, and other stakeholders to operationalize ISO 27001 requirements. • Communicate compliance expectations, priorities, and deadlines while driving accountability across teams. • Collaborate with the GRC Manager to align ISO 27001 activities with broader GRC initiatives. • Leverage existing SOC 2 controls and evidence and support alignment with other applicable frameworks, including GovRAMP, NIST SP 800-53, and PCI DSS. • Provide regular reporting on certification readiness, program milestones, compliance gaps, and remediation progress.
Benefits
• The annual base salary range for this full-time position is $120,000-$140,000 (less applicable taxes). The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience. In addition to an annual base salary, this position is eligible for an annual bonus target. This is a discretionary bonus awarded based on company and individual goal achievement. • Accela’s U.S. team members will receive a generous benefits package consisting of options including flexible time off, comprehensive medical, dental, and vision plans, family planning benefits, 401(k) retirement savings plan with company match, health savings account with company contributions, flexible spending account, life, accident, and disability coverage, business travel insurance, employee assistance programs, and other well-being benefits.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT