Senior Security & Compliance Analyst

1 month, 2 weeks ago
Energy Exemplar

Energy Exemplar

Energy Exemplar is a leading provider of award-winning energy simulation software, including PLEXOS and Aurora, used for modeling electric, gas, and water energy markets worldwide. Their solutions offer in-depth insights for financial industry professi...

Internet Software & Services
251-1K
Founded 1999

Description

  • Support security and compliance programs aligned with ISO 27001, SOC 1, SOC 2, privacy, and emerging AI governance requirements.
  • Coordinate vulnerability remediation efforts across Engineering, Cloud Operations, IT, and Product teams to meet defined SLAs.
  • Track and report security metrics such as MTTR, overdue vulnerabilities, remediation trends, audit findings, and compliance dashboards.
  • Follow up on and escalate unresolved vulnerabilities, audit findings, and compliance gaps.
  • Support continuous control monitoring, risk assessments, third-party risk management, policy management, access reviews, and audit activities.
  • Respond to customer security and compliance due diligence requests, audits, and questionnaires.
  • Support AI governance, security, and compliance initiatives, including assessment of AI-related risks, regulations, and standards.
  • Evaluate AI-enabled solutions and third-party AI services for security, privacy, compliance, and responsible AI considerations.
  • Monitor emerging cybersecurity threats, privacy regulations, and compliance requirements.
  • Collaborate with cross-functional teams to drive remediation and continuous improvement initiatives.

Requirements

  • 6–8 years of experience in Governance, Risk & Compliance (GRC), cybersecurity, information security, or risk management.
  • Strong understanding of ISO 27001, SOC 1 / SOC 2, GDPR/privacy principles, vulnerability management, and security controls.
  • Experience with energy or utilities sector security and compliance requirements, such as CEII or critical infrastructure requirements.
  • Experience coordinating vulnerability remediation programs, tracking SLA compliance, MTTR metrics, and executive reporting.
  • Experience supporting audits, customer security reviews, and compliance programs.
  • Familiarity with emerging AI governance, privacy, and security frameworks such as ISO 42001, the EU AI Act, and responsible AI principles is preferred.
  • Strong communication, organizational, stakeholder management, and follow-up skills.
  • Ability to work independently and proactively drive outcomes across distributed teams.
  • CISSP, CISA, ISO 27001 Lead Implementer/Auditor, or similar certifications are preferred.
  • AI governance or privacy certifications are a plus.

Benefits

  • Flexible work environment with the option to work from home, in the office, or while on the move.
  • Support for work-life balance.
  • Opportunity to join a fast-growing global company.
  • Inclusive, diverse, and equal opportunity workplace.
  • Accommodations available during the recruitment process if needed.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Environmental Licensing Engineer

Lightbridge 11-50 Industrial Conglomerates

Lightbridge is seeking an Environmental Licensing Engineer to support regulatory compliance and environmental licensing for next-generation nuclear fuel development and fuel cycle facility siting.

16 hours, 52 minutes ago

Policy Analyst

ZERO TO THREE 251-1K Diversified Consumer Services

ZERO TO THREE is hiring a Policy Analyst to advance its federal policy agenda on child care, family tax policy, and related issues in support of infants, toddlers, and families.

17 hours, 22 minutes ago

Infringement Manager

DistroKid 251-1K Media

DistroKid is hiring an Infringement Manager to lead its infringement operations team handling copyright, trademark, and impersonation claims across the platform.

Confluence
2 days, 16 hours ago

Principal, Policy Development

GoFundMe 251-1K Capital Markets

GoFundMe is hiring a Principal, Policy Development to shape Trust & Safety policies that govern fraud, identity, content, and platform conduct across a large social fundraising platform.

Machine Learning
2 days, 17 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers