Risk and Compliance Analyst

March 28

Apply Now

Receive Emails with Similar Jobs

Exterro

WebsiteLinkedInAll Job Openings

Exterro is a comprehensive platform that empowers organizations to manage data risks through a combination of e-discovery, data privacy, cybersecurity compliance, and digital forensics solutions. Founded in 2008, Exterro utilizes innovative technologies, including artificial intelligence, to streamline and optimize critical legal and compliance processes. With a growing client base of over 3000 organizations and a team of 750 employees, Exterro has become a trusted partner across various industries, helping organizations navigate the complexities of data management and governance.

Legal Hold • E-Discovery Project Management • ESI Collection • Cloud Computing • Early Case Assessment

501 - 1000 employees

Founded 2004

🛍️ eCommerce

🔒 Cybersecurity

💰 Private Equity Round on 2022-07

📋 Description

• We are seeking a highly skilled and detail-oriented Risk and Compliance Analyst to join our team. • You will help evaluate and assess risks associated with internal processes and third-party risk. • This role involves auditing public cloud environments, assessing security controls, managing vendor risks, and supporting sales enablement efforts. • You will support the development, implementation, and monitoring of the organization’s risk management and compliance programs. • Collaborate with internal teams to identify, assess and mitigate risks, ensuring adherence to industry regulations and compliance frameworks. • Conduct regular risk assessments to evaluate potential threats and recommend appropriate mitigation strategies. • Evaluate, assess, and maintain compliance with industry-recognized standards such as SOC 2, ISO 27001, and NIST 800-53. • Provide support to sales teams by addressing client inquiries related to security and compliance requirements.

🎯 Requirements

• Bachelor’s Degree in Information Security, Computer Science, Risk Management, or a related field. • 3+ years of experience in vendor risk management, cybersecurity compliance, or IT auditing, preferably within SaaS or cloud technology. • Experience in assessing and managing risks, including IT, and security. • Understanding and auditing of information security standards (e.g., NIST 800-53, ISO 27001, SOC 2, etc.) and regulatory requirements (e.g., GDPR, HIPAA). • Experience in public cloud audit (AWS, Google, Azure, etc.). • Knowledge of information security standards, regulatory requirements, and best practices. • Familiarity with governance, risk and compliance management tools and platforms preferred but not required (e.g., Vanta, RSA Archer, AuditBoard, etc.). • Strong attention to detail and critical thinking skills. • Excellent English written and verbal communication skills, with the ability to explain complex technical issues to non-technical stakeholders. • Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or similar certifications are a plus.

🏖️ Benefits

• Health insurance • Retirement plans • Flexible paid time off • Comprehensive benefits package