Senior Compliance Analyst

OneStream Software•,

13h•$99,000 - $128,500•Remote

About The Position

We are seeking an experienced Senior Compliance Analyst with a strong background in IT General Controls (ITGCs) and cloud-based service offerings (e.g., SaaS). This role supports the ongoing management and maturity of the compliance program, ensuring alignment with regulatory requirements, industry frameworks, and contractual obligations. The ideal candidate will have experience assessing security controls, supporting customer due diligence and contract reviews, and partnering across teams to address compliance, security, and audit requirements.

Requirements

Bachelor's degree and 5+ years of experience in IT audit, cybersecurity, information security, cloud compliance, risk management, regulatory compliance, or related field.
Strong knowledge of IT General Controls (ITGCs), cloud security principles, shared responsibility models, and cloud infrastructure architectures.
Experience supporting compliance programs, audits, and assessments related to frameworks such as SOC 1, SOC 2, ISO 27001, NIST 800-53, FedRAMP, GDPR, or similar standards.
Excellent written and verbal communication skills, with the ability to translate complex technical and compliance concepts for both technical and non-technical audiences.

Nice To Haves

Experience with SaaS, cloud-native, or enterprise software environments.
Experience reviewing and interpreting information security, privacy, artificial intelligence, and compliance requirements within customer contracts and legal agreements.
Familiarity with Microsoft Azure.
Relevant certifications such as CISA, CISSP, CISM, CRISC, CCSP, or similar.

Responsibilities

Evaluate and assess IT General Controls (ITGCs), security controls, and compliance processes to ensure alignment with regulatory, contractual, and organizational requirements.
Partner with Security, Cloud Operations, Engineering, Product, Legal, and other stakeholders to ensure compliance requirements are appropriately implemented and maintained within cloud-hosted environments.
Review customer contract terms related to cybersecurity, privacy, artificial intelligence, audit rights, and regulatory compliance.
Support negotiations with prospective and existing customers by providing subject matter expertise on security, compliance, cloud infrastructure, and control implementation.
Complete customer and prospect due diligence questionnaires, security assessments, and requests for compliance-related information.
Support external audits and certification activities, including SOC 1, SOC 2, ISO 27001, FedRAMP, and other applicable frameworks.
Perform compliance assessments, risk analyses, and control reviews to identify gaps and recommend remediation activities.
Develop, maintain, and enhance compliance policies, standards, procedures, and control documentation.
Monitor changes in regulatory requirements, cybersecurity threats, cloud technologies, and industry best practices to continuously improve the compliance program.
Serve as a trusted advisor on compliance matters across the organization.