Compliance & Risk Analyst

Pebl

1d•$90,000 - $120,000

About The Position

Pebl puts a world of talent at your fingertips. With our AI-powered Global Work Platform™, companies can hire, pay, and manage employees in 185+ countries—removing risk, red tape, and guesswork from global growth. Backed by more than a decade of compliance leadership and local expertise, Pebl helps businesses move fast, stay compliant, and scale with confidence. With Pebl, companies everywhere can hire great talent anywhere. Where Your Work Moves the Needle. At Pebl, every team member drives our success. Joining us means more than filling a role—you’re accountable for results and impact. Our values guide how we operate, execute, and collaborate across borders. By putting them into action, you’ll help us scale faster, compete harder, and lead the future of global work. We are seeking a highly motivated and experienced Compliance & Risk Analyst to join our Security & Compliance team! Can you assess and interpret data better than those around you? Are you a thought leader? Are you a great team player and love being part of a vibrant, intelligent team? If this sounds like you, come join us at Pebl. The Compliance & Risk Analyst is responsible for supporting and executing the company’s compliance programs. This person works closely with the Security Engineering team, Legal organization and all business units, including Technology, Operations, Sales, and others. Under the guidance of the Senior Manager of IT and Compliance, this person assists with industry and client audits, internal assessments, and compliance requests, including but not limited to SOC1, SOC2, ISO, and Privacy. The role also involves supporting risk identification and management across the company. Additionally, this person may assist with information security initiatives to protect both Pebl and customer data. While the Compliance & Risk Analyst’s focus is on compliance responsibilities, opportunities may exist to contribute to broader security platforms and initiatives.

Requirements

Bachelor’s degree in Compliance, Audit, Cybersecurity, Information Security, Information Technology, Computer Science, or a related field, or equivalent professional experience
Minimum of 4 years of experience in compliance, audit, security, or risk management
Understanding of privacy regulations (e.g., CCPA, GDPR)
Competency in supporting audit and compliance processes
Strong organizational and time-management skills
Ability to create and maintain policies, procedures, and documentation

Nice To Haves

Hands-on experience with SOC 2, ISO 27001, TX-RAMP, or other audit/compliance frameworks
Exposure to risk and security frameworks such as NIST CSF, NIST RMF, or ISO 27001
Experience supporting third-party assessments or client compliance requests
Familiarity with business continuity or incident response planning and testing
Experience collaborating across cross-functional teams in a technical environment
Detail-oriented and proactive
Strong analytical and problem-solving abilities
Excellent written and verbal communication skills
Professional judgment and discretion with sensitive information
Collaborative mindset and willingness to learn
Ability to manage multiple priorities in a fast-paced environment

Responsibilities

Lead and own the SOC audits including SOC 1 Type II, SOC 2 Type II, ISO 27001 and others with all Trust Service Criteria
Partner with Legal teams with privacy readiness efforts aligned with U.S. and international regulations (e.g., CCPA, GDPR), including data breach response preparedness
Assist with Governance, Risk, and Compliance (GRC) program activities, including monitoring control effectiveness and remediation tracking
Maintain and update policies, standards, and procedures
Support client third-party management requests and assessments
Assist with vendor risk management and other compliance-related initiatives as directed
Support security initiatives as needed across the Risk & Security team
Assist in monitoring, reporting, and documentation of security systems and controls
Monitor remediation activities related to penetration testing and application security assessments
Participate in incident response for privacy and data subject requests
Prepare compliance and risk reports for management and clients
Assist in handling audit inquiries and evidence collection
Support Business Continuity and Disaster Recovery (BCDR) testing
Perform additional duties as assigned