RemoteLeaf Logo
Log in Sign up

IT Risk and Compliance Analyst

1 hour, 36 minutes ago
United States
Full-time
Mid Level
Compliance Manager
Legal
Apply Now
Huge

Huge

Huge is a design and technology agency that specializes in creating innovative digital products and experiences aimed at enhancing brand growth and addressing complex business challenges through a blend of strategy, design, marketing, and technology se...

Media
251-1K
Founded 1999
View All Jobs 7

Description

  • Review MSAs, SOWs, DPAs, and security addenda; coordinate required redlines through signature.
  • Translate contractual security, privacy, data-handling, audit, and breach-notification obligations into tracked operational commitments.
  • Respond to client security questionnaires, due diligence requests, and audit inquiries while maintaining the answer library.
  • Collect and maintain control evidence in the GRC platform and track remediation against SOC 2, ISO 27001, NIST CSF, and other frameworks.
  • Support SaaS and AI vendor risk assessments, including documentation, DPAs, sub-processors, findings, and vendor-register updates.
  • Operationalize data retention and disposal requirements, including schedules, exceptions, legal holds, and platform settings.
  • Support privacy activities such as data mapping, data subject requests, and GDPR/CCPA obligation tracking.
  • Maintain compliance policies, SOPs, process documentation, risk registers, and leadership reporting.
  • Participate in business continuity, disaster recovery, tabletop exercises, incident response, internal audits, access reviews, and control testing.
  • Administer security awareness training and monitor completion.

Requirements

  • Bachelor’s degree or equivalent practical experience.
  • 3–5 years of experience in compliance, GRC, contract management, privacy, or a related field.
  • Hands-on experience reviewing commercial contracts, preferably MSAs, DPAs, or security addenda, and coordinating redlines with legal counsel.
  • Experience responding to client security questionnaires or vendor due diligence requests.
  • Working knowledge of at least one major framework, such as SOC 2, ISO 27001, or NIST CSF, including practical evidence requirements.
  • Foundational understanding of GDPR and CCPA and their contractual implications.
  • Exceptional organization, follow-through, and ability to manage multiple parallel workstreams.
  • Clear, concise written communication and ability to summarize complex contracts and risks.
  • Comfort with SaaS tools and learning new platforms quickly.
  • Self-directed approach and ability to own outcomes in a small team.
  • Remote work eligibility within the United States; the role is unavailable in New Mexico, Montana, Alaska, and Hawaii.

Benefits

  • Remote position within the United States.
  • Salary range of $80,000–$90,000 USD.
  • Inclusive, barrier-free workplace and recruitment process with accommodation support.
  • Equal opportunity employer committed to workforce diversity.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

ApartmentIQ

Multifamily Fee Compliance Expert

ApartmentIQ

ApartmentIQ, a remote PropTech SaaS company, is hiring a Solutions Consultant to help multifamily operators manage fee transparency and compliance through customer demonstrations, regulatory research, and product guidance.

United States Full-time Senior Compliance Manager Solutions Engineer
1 hour, 36 minutes ago
Horace Mann

Suitability Analyst

Horace Mann 1K-5K Insurance

Horace Mann is seeking a Suitability Analyst to support its Broker-Dealer Compliance team by reviewing financial services transactions, advising registered representatives, and maintaining compliance with firm procedures and FINRA requirements.

United States Full-time Junior Compliance Manager
$66k-$92k
1 day, 1 hour ago
Picus Security

Senior Technology Risk & Audit Specialist

Picus Security 51-250 Professional Services

Picus Security is hiring a Senior Technology Risk & Audit Specialist to lead continuous technology assurance, global certification programs, and risk-informed security governance across its cloud-native, AI-driven cybersecurity platform.

Turkey Full-time Senior Compliance Manager
CI/CD Cybersecurity Machine Learning SIEM
2 days, 1 hour ago
World Business Lenders

Regulatory and Compliance Team Lead

World Business Lenders 251-1K Real Estate

World Business Lenders is seeking a Regulatory and Compliance Team Lead to oversee its compliance framework across lending, servicing, and corporate operations within a fully remote, multinational organization.

Turkey Full-time Lead Compliance Manager
2 days, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers