Senior Security & Compliance Analyst

About the role

Reporting to the VP, Cloud Operations & GRC, the Sr. Security & Compliance Analyst will support the execution and continuous improvement of Energy Exemplar’s security, risk, compliance, vulnerability management, and AI governance programs across cloud and enterprise operations.

What you'll do

• Support security and compliance programs aligned with ISO 27001, SOC 1, SOC 2, privacy, and emerging AI governance requirements
• Coordinate and drive vulnerability remediation activities across Engineering, Cloud Operations, IT, and Product teams to ensure remediation within defined EE SLAs
• Track and report security metrics, including MTTR, overdue vulnerabilities, remediation trends, audit findings, and compliance dashboards
• Proactively follow up and escalate unresolved vulnerabilities, audit findings, and compliance gaps
• Support continuous control monitoring, risk assessments, third-party risk management, policy management, access reviews, and audit activities

What you need

• 6–8 yrs of experience
• Compliance
• Data privacy
• ISO 27001
• Vulnerability assessment
• CISSP
• CISA
• Any graduate

Good to have

• Due diligence