Senior Security Compliance Analyst (Remote)

Moving is one of the most universally relatable problems. Most of us have moved at least once and everyone thinks moving is painful. Updater is solving that pain at scale. We’re a well-funded and growth-focused company, with technology that touches nearly 50% of all household moves in the US annually, and we’re growing quickly. We’ve redefined an age-old industry and thousands of moving companies depend on our category-leading platform.

As a Senior Security Compliance Analyst reporting into Updater’s Director of Risk & Compliance within the all-encompassing Security function, you will be supporting the entire Updater company in building out programs aligning Assurance, Risk, Privacy, and Compliance disciplines for both internal and external stakeholders to the business.

In this role, we are looking for you to bring your professional expertise and pragmatic experience to ensure that an organization's operations and procedures meet government and industry compliance standards. This role will range from auditing systems, training employees, advising team members, and performing gap analysis reports, to staying ahead of upcoming policies and laws. We are seeking out talented security compliance professionals to join our team who are excited to partner with engineering, IT, and business operations teams in order to design efficient and effective processes that are safe and compliant.

About the Role

• Continually translate compliance requirements into relevant cloud-based security controls
• Partner with security, software engineering, and devops teams for control validation
• Operate our security assurance function
• Administer security training for the organization
• Conduct security awareness for threats that impact the organization
• Evaluate vendors against compliance and security standards
• Design and operate our security assurance metrics function
• Lead our audit preparation function in partnership with the security leadership team
• Plan and execute security audits, perform gap assessments, and advise on remediation
• Organize and present audit documents for internal and external stakeholders
• Monitor the regulatory landscape for changes that could impact business lines.

About You

• 5+ years of work experience in security compliance or audit field
• Strong analytical skills to evaluate security requirements and translate to appropriate security controls.
• Proficient in government security compliance (FedRAMP, FISMA, and/or CMMC)
• Have taken high-growth technology companies through an audit (SOC 2, FedRAMP, CMMC, PCI)
• Operated a data privacy function (e.g., CCPA or GDPR)
• Bonus - industry-relevant certifications such as CISSP, CISA, GIAC, CIPP, PCI-ISA, etc.