Staff Compliance Analyst

ServiceNow • West Palm Beach, FL

5d

About The Position

The Staff Compliance Analyst will contribute to and execute the certification strategy defined by Security Compliance leadership. The role maintains existing third-party assurance programs and analyzes and supports adoption of new programs as directed by ServiceNow leadership. The analyst collaborates with Sales, Security, and Operations teams, monitors controls by understanding their intent and implementation, and drives organizational changes through effective testing.

As a member of ServiceNow’s Security Organization, the analyst will help define the Security and Compliance framework for a leading cloud company. The role calls for analyzing difficult problems, developing pragmatic solutions and recommendations, understanding and influencing cloud operational and security processes, communicating control intent effectively, and leveraging AI to scale compliance. Current initiatives include regional programs such as Spanish ENS, French HDS, Italy QC2, and UK Cyber Essentials Plus, as well as global programs such as ISO 27001, ISO 27018, PCI, and SOC 2. The posting also describes work measuring compliance for cloud business systems, control areas, processes, and products.

Requirements

• 8+ years of experience in cybersecurity compliance, security risk, audit, or similar experience plus education.
• Direct and recent working experience with at least three of the following: ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX, C5 in Germany, or SOC 2.
• Experience leveraging or critically considering how to integrate AI into work processes, decision-making, or problem-solving; examples include AI-powered tools, workflow automation, analysis of AI-driven insights, or exploring AI’s impact.
• Excellent report-writing skills, including preparing compliance reports and associated metrics.
• Excellent verbal and written communication skills.
• Ability to work effectively with other members of the GRC organization to drive results.
• Ability to analyze difficult problems, think outside the box, and provide pragmatic solutions and recommendations.

Nice To Haves

• Prior experience working in the Security and Compliance group at a SaaS/cloud company or with the Security and Risk practice of a Big Four firm.
• Relevant professional certifications such as CISSP, CISA, or CISM.
• Demonstrated experience working in large projects.
• Experience using a GRC system.

Responsibilities

• Perform activities to help measure and monitor compliance with company policies and procedures.
• Facilitate certifier requests and gather information for external and internal audits.
• Lead onsite and remote certification and customer audits.
• Conduct activities to comply with Government Cyber Security requirements within EMEA.
• Drive security compliance testing activities across various teams within the organization.
• Liaise with Risk Management and conduct security risk assessment activities.
• Help customers understand ServiceNow’s security and compliance control environment.
• Contribute to enhancing the GRC tool and processes to meet compliance business needs.
• Maintain existing third-party assurance programs and support analysis and adoption of new programs.
• Monitor controls by understanding their intent and implementation, and drive organizational changes through testing.
• Contribute to and execute the certification strategy defined by Security Compliance leadership.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed