Senior Compliance Analyst

Accela

. Lead the end-to-end implementation and certification of Accela's ISO/IEC 27001:2022 program .

Posted 10/23/2026full-timeRemote • United StatesSenior💰 $120,000 - $140,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading ISO/IEC 27001:2022 implementation and certification, including risk assessments, compliance documentation, and stakeholder management. Proficient in utilizing GRC platforms like Drata to ensure audit readiness and compliance across multiple frameworks.

Highest-signal resume keywords

ISO/IEC 27001 ImplementationGovernance, Risk And Compliance (GRC)Risk Assessment And TreatmentCompliance Automation PlatformsStakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ISO/IEC 27001:2022 RequirementsInformation Security Risk AssessmentControl ImplementationAudit ProcessesCompliance Policies And ProceduresEvidence ManagementDocumentation ManagementControl Effectiveness EvaluationRegulatory Compliance MonitoringCross-Functional Collaboration

Soft Skills

Project ManagementAnalytical SkillsOrganizational SkillsCommunication SkillsInfluencing Skills

Tools & Technologies

GRC PlatformsDrataAWSCloud Security Controls

Certifications & Qualifications

ISO/IEC 27001 Lead ImplementerISO/IEC 27001 Lead AuditorCISACGRC

Industry Keywords

SOC 2 Type IIGovRAMPNIST SP 800-53CIS ControlsPCI DSS

Tech Stack

Tools & technologies

AWSCloudCyber Security

About the role

Key responsibilities & impact

Lead the end-to-end implementation and certification of Accela's ISO/IEC 27001:2022 program
Develop and manage implementation plans, milestones, deliverables, and stakeholder responsibilities
Conduct gap assessments, identify compliance requirements, and coordinate remediation activities
Establish and maintain ISMS scope, objectives, and Statement of Applicability
Coordinate external certification, surveillance, and recertification audits, including preparation, evidence collection, stakeholder interviews, and remediation of findings
Monitor progress, risks, and dependencies and provide regular updates to the GRC Manager
Conduct and maintain information security risk assessments, risk registers, and risk treatment plans
Partner with control owners to implement, assess, document, and monitor ISO 27001 controls
Evaluate control effectiveness, identify gaps, and track remediation through completion
Coordinate internal audits, management reviews, corrective actions, and continual improvement activities
Monitor organizational and regulatory changes affecting ISMS requirements and compliance obligations
Develop and maintain information security policies, procedures, standards, and supporting ISMS documentation
Establish documentation management, control assessment, evidence collection, and compliance monitoring processes
Maintain accurate, current, approved, and audit-ready documentation and records
Integrate ISO 27001 requirements into existing business processes
Maintain ISO 27001 requirements, controls, risks, evidence, and remediation activities in Accela's GRC platform, including Drata
Map controls and evidence to ISO 27001 requirements and leverage automation for evidence collection, reporting, and audit readiness
Establish control ownership, evidence requirements, and ongoing monitoring processes
Partner with Information Security, IT, Engineering, HR, Legal, Finance, and other stakeholders to operationalize ISO 27001 requirements
Communicate compliance expectations, priorities, and deadlines while driving cross-functional accountability
Align ISO 27001 activities with broader GRC initiatives alongside the GRC Manager
Leverage SOC 2 controls and evidence and support alignment with GovRAMP, NIST SP 800-53, and PCI DSS
Provide reporting on certification readiness, program milestones, compliance gaps, and remediation progress

Requirements

What you’ll need

5+ years of experience in governance, risk and compliance (GRC), information security compliance, security assurance, or a related field
Demonstrated experience leading or substantially owning an ISO/IEC 27001 implementation and certification effort
Strong knowledge of ISO/IEC 27001:2022 requirements, ISMS operations, risk assessment, risk treatment, control implementation, and audit processes
Experience preparing for and coordinating external certification audits, including evidence management and remediation of findings
Experience developing and maintaining compliance policies, procedures, risk assessments, and control documentation
Hands-on experience with a GRC or compliance automation platform, such as Drata or a comparable solution
Strong project management, analytical, and organizational skills
Excellent communication and stakeholder management skills, including translating technical requirements into actionable business processes
Ability to influence and drive accountability across cross-functional teams without direct reporting authority
ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or comparable professional certification
Working knowledge of SOC 2 Type II, GovRAMP, NIST SP 800-53, CIS Controls, or PCI DSS
Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent practical experience (preferred)
Experience supporting GRC programs within a SaaS, cloud technology, or enterprise software environment (preferred)
Familiarity with AWS or comparable cloud environments and associated security controls (preferred)
Experience leveraging compliance automation platforms and integrating requirements across multiple compliance frameworks (preferred)

Benefits

Comp & perks

Annual bonus target; discretionary bonus based on company and individual goal achievement
Flexible time off
Comprehensive medical, dental, and vision plans
Family planning benefits
401(k) retirement savings plan with company match
Health savings account with company contributions
Flexible spending account
Life, accident, and disability coverage
Business travel insurance
Employee assistance programs
Other well-being benefits
Job accommodations available upon request