Senior Compliance and Audit Analyst

Zayo Group

1d•$95,100 - $146,300•Remote

About The Position

The Senior Compliance and Audit Analyst supports Zayo’s security assurance, customer trust, audit support, and third-party risk management activities. The role responds to customer security inquiries, completes security questionnaires, supports security-related contract reviews, provides approved audit evidence where appropriate, maintains customer-facing Trust Center content, and assists with third-party risk reviews. The analyst works closely with Information Security, Legal, Privacy, Compliance, Procurement, Sales, Product, and business stakeholders to ensure security responses, customer commitments, vendor reviews, evidence, and public-facing security content are accurate, timely, and aligned with organizational policies, standards, and approved practices.

Requirements

Bachelor’s degree in Information Systems, Cybersecurity, Risk Management, or a related field, or equivalent professional experience.
At least six years of experience in information security, compliance, customer assurance, third-party risk management, audit support, contract support, customer service, vendor management, or a related role.
Familiarity with ISO 27001, NIST SP 800-171, GDPR, and SOC 2.
Experience responding to customer security inquiries, due diligence requests, security questionnaires, RFP/RFI security sections, or similar information requests.
Familiarity with security-related contract topics, including information security requirements, audit rights, incident notification, data protection, privacy, third-party obligations, and compliance requirements.
Ability to read and interpret organizational policies, standards, procedures, customer requirements, vendor documentation, audit materials, and contract language.
Strong written communication skills, with the ability to provide clear, accurate, and professional responses.
Strong attention to detail and ability to identify inconsistencies, missing information, unclear language, non-standard commitments, or items requiring escalation.
Ability to collaborate effectively with Legal, Security, Procurement, Sales, business owners, and technical subject matter experts.
Strong organizational, documentation, and time management skills, with ability to manage multiple requests, reviews, and deadlines.
Proficiency with Microsoft Office, ServiceNow, knowledge management tools, and collaboration platforms.

Nice To Haves

Experience with common controls, control mapping, or cross-framework control alignment.
Experience using ServiceNow or similar ticketing, workflow, case management, or risk management tools.
Experience supporting third-party risk management, vendor due diligence, supplier risk assessments, or vendor security reviews.
Professional certifications in cybersecurity, compliance, or risk-related areas.

Responsibilities

Respond to customer security inquiries, due diligence requests, security questionnaires, and RFP/RFI security sections using approved response content, templates, and guidance.
Review, triage, track, and manage assigned customer security, audit evidence, contract review, and third-party risk requests through ServiceNow or other approved systems.
Coordinate with Security, Legal, Procurement, Sales, Product, business owners, and technical subject matter experts to gather, validate, and approve response content.
Prepare clear, accurate, customer-appropriate responses about security controls, policies, standards, certifications, audit reports, privacy practices, and compliance activities.
Assist with reviewing customer and vendor contract language involving information security, privacy, audit rights, incident notification, data protection, compliance obligations, third-party requirements, or control commitments.
Compare customer and vendor security requirements against organizational policies, standards, approved positions, control capabilities, and risk guidance.
Identify non-standard commitments, unclear requirements, control gaps, policy conflicts, or risk indicators and escalate them to appropriate stakeholders.
Assist with audit evidence when appropriate, ensuring externally shared evidence is accurate, current, approved, and authorized for release.
Coordinate with control owners, audit teams, and internal stakeholders to gather, validate, track, and document audit evidence requests and related approvals.
Support Third Party Risk Management activities, including vendor and supplier security reviews, due diligence requests, risk assessments, renewal reviews, and ongoing monitoring.
Review vendor-provided questionnaires, certifications, audit reports, policies, security documentation, and other assurance materials against established review criteria.
Track third-party risk assessment status, open questions, required documentation, approvals, risk decisions, exceptions, remediation items, and follow-up actions.
Support development and maintenance of publicly appropriate Trust Center content, including security, compliance, privacy, certification, audit, and assurance materials.
Review Trust Center content to help ensure it remains accurate, current, customer-appropriate, and aligned with approved policies, standards, reports, and disclosures.
Use and help maintain approved response libraries, standard security language, FAQs, Trust Center materials, third-party risk guidance, and customer assurance content.
Maintain accurate records of customer inquiries, questionnaire responses, contract review notes, audit evidence, Trust Center updates, third-party assessments, escalations, approvals, and final outcomes.
Support customer-facing or vendor-related follow-up discussions by preparing materials, documenting questions, and coordinating internal input.
Monitor assigned requests to support timely completion, appropriate follow-up, and accurate reporting on status, volume, aging, and recurring themes.
Identify recurring customer questions, vendor risk themes, response gaps, evidence request trends, Trust Center content needs, or process issues and share improvement recommendations.
Support internal process documentation and guidance related to customer security inquiry handling, security contract review, audit evidence coordination, Trust Center maintenance, and Third Party Risk Management.