Senior Information Security & Compliance Analyst

Laivly

1d•Remote

About The Position

Laivly is seeking a Senior Information Security & Compliance Analyst to strengthen and evolve its information security, risk, and compliance programs. The analyst will help build scalable security and compliance practices that support Laivly’s technology, customers, and business, working closely with IT Operations, Architecture, Engineering, and other teams. The role translates complex security requirements into practical solutions, improves audit readiness, and supports expansion into highly regulated environments. It calls for strong security judgment, hands-on work, ownership, and the ability to navigate complexity and turn compliance requirements into sustainable business practices. This is a remote position based in the United States. Laivly describes its work environment as flexible and emphasizes collaboration, career growth, and a creative, diverse, and passionate team.

Requirements

At least 5 years of progressive experience in information security, governance, risk, compliance, or security assurance.
Demonstrated experience supporting or owning complex security and compliance programs, such as SOC 2, PCI DSS, ISO 27001, or NIST-based frameworks.
Strong understanding of security controls, risk management, audit processes, vulnerability management, and remediation.
Experience coordinating audits, managing compliance evidence, and working with technical and non-technical stakeholders.
Familiarity with AWS, cloud security concepts, and modern SaaS environments.
Experience with Vanta or similar compliance automation platforms.
Strong organizational, analytical, and communication skills, including the ability to manage competing priorities and drive initiatives forward.

Nice To Haves

Experience with FedRAMP or other U.S. federal security requirements.
Relevant certifications such as CISSP, CISM, CISA, CCSP, or CGRC.

Responsibilities

Support and continuously improve information security, risk, and compliance programs, including SOC 2, PCI DSS, and other applicable frameworks.
Translate regulatory, security, and customer requirements into practical controls, processes, and remediation plans.
Maintain security policies, standards, risk assessments, and supporting compliance documentation.
Coordinate security audits, assessments, evidence collection, and remediation activities.
Partner with internal teams and external assessors to support audit readiness and ongoing compliance.
Identify and monitor security risks, track corrective actions, and communicate findings and recommendations.
Support customer security reviews, due diligence, and third-party risk management activities.
Use compliance automation tools to streamline evidence collection, control monitoring, and reporting.
Identify opportunities to strengthen security processes, improve efficiency, and reduce manual compliance efforts.
Collaborate with technical teams to implement effective security controls and continuously validate their performance.