Note: The job is a remote job and is open to candidates in USA. Greenhat Security is a cybersecurity-focused organization that helps clients manage risk, protect sensitive data, and meet security and compliance requirements. The Compliance Analyst will support compliance programs by interpreting regulations and standards, assessing policies and controls, conducting audits, preparing reports and evidence, tracking remediation, and collaborating on risk assessments, policy development, and training materials.
Responsibilities
- Review and interpret applicable regulations and standards
- Assess internal policies and procedures
- Recommend updates to ensure alignment with regulatory and industry requirements
- Conducting compliance assessments and audits
- Analyzing data and documentation
- Preparing reports and evidence for internal and external stakeholders
- Tracking remediation efforts
- Collaborating with cross-functional teams
- Supporting risk assessments
- Assisting with policy development
- Helping to prepare materials for training and awareness initiatives
Skills
- Strong Regulatory Compliance experience, including familiarity with relevant cybersecurity, privacy, and financial regulations or frameworks
- Demonstrated Analytical Skills for evaluating controls, reviewing documentation, interpreting data, and identifying gaps or risks
- Effective Communication skills, including the ability to write clear reports, present findings, and collaborate with technical and non-technical stakeholders
- Background in Finance or related disciplines to understand financial controls, risk management concepts, and compliance impacts on business operations
- Hands-on Auditing experience, such as participating in internal audits, evidence collection, control testing, and support for external assessments
- Bachelor's degree in Business, Finance, Information Security, Compliance, or a related field, or equivalent practical experience
- Knowledge of information security principles, risk management practices, and common cybersecurity frameworks (e.g., ISO 27001, NIST, SOC 2) is highly beneficial
- Ability to work independently in a remote environment, manage multiple priorities, and meet deadlines with attention to detail
- Relevant certifications (e.g., CISA, CRISC, CISSP, or compliance-related credentials) are a plus
Benefits
- Full-time remote work
Company Overview