ISO27001 Compliance Analyst

Viasat, Inc. • Carlsbad, CA

26d

About The Position

Viasat is seeking an Information Security Analyst to maintain continuous compliance with the ISO 27001:2022 framework. Working within the security organization and with business stakeholders, this role implements, assesses, and audits security practices and technical configurations to support company-wide compliance goals. The analyst ensures applicable program regulations and standards are met, security controls operate effectively, and performance metrics are developed to measure success. The role also continuously tunes the compliance program as technology changes.

The successful candidate is a self-starter who can work independently, prioritize work by business impact, and manage multiple efforts simultaneously. The role calls for broad knowledge of modern technology and security best practices, strong analytical skills, attention to detail, discipline, and excellent verbal and written communication skills to build and maintain stakeholder relationships. Travel of up to 40% is required.

Requirements

• At least 8 years of experience in risk and compliance focused on ensuring adherence to federal, state, and industry laws and benchmarks.
• At least 8 years of experience working with ISO 27001:2022, including auditing and/or control implementation.
• ISMS Lead Auditor or Lead Implementor certification, or ability to acquire certification upon hire.
• Ability to prepare disparate development teams for the demands of IT framework controls.
• Deep understanding of laws and regulations related to enterprise security and risk.
• Broad knowledge of infrastructure, networking, security, and endpoint technologies.
• Excellent administrative and interpersonal skills, attention to detail, high accuracy, and ability to lead several simultaneous projects.
• Exceptional oral and written communication skills, including the ability to ask clear, concise questions about sophisticated technology to obtain necessary answers from business partners and colleagues.
• Experience with a GRC tool to optimize risk, compliance, and audit functions.
• Knowledge of risk management and governance control implementation in cloud and on-premise technologies.
• Ability to travel up to 40%.

Nice To Haves

• BA or BS in a related field, or equivalent experience.
• Security and audit industry certifications, including CISA, CIA, CISM, CISSP, SANS, CPA, or similar.
• Previous experience as, or interacting with, a third-party audit team auditing PCI DSS, NIST SP 800-171/CMMC, and/or IT SOX.
• Project management experience.
• Experience with teamwork and problem-solving.
• Mature knowledge of information technology, including applications, back-office integrations, operations, and key business processes.

Responsibilities

• Communicate compliance activities to interested parties across multiple product lines and technologies.
• Support engineering and IT requests related to security and compliance impacts of changes in target environments.
• Own resolution of identified information security and data issues.
• Facilitate ISO 27001 ISMS or similar activities as a second line of defense and provide advisory support for company systems.
• Assist with developing, maintaining, and automating security, risk, and compliance artifacts and documentation, including exceptions and alternative controls for non-standard use cases.
• Develop and implement control-effectiveness testing programs to validate ISO 27001 compliance.
• Identify and lead security control ownership across ISO 27001 Annex A requirements.
• Lead internal audits and coordinate external certification reviews, including scheduling, execution, and follow-up.
• Interact with auditors to determine the context of risks associated with findings.
• Stay informed about industry changes, trends, and information security guidelines.
• Perform formal and informal risk assessments.

Benefits

• Medical, financial, and/or other benefits, dependent on the position offered.
• Additional cash or stock incentives may be provided as part of the compensation package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed