Staff Compliance Analyst

ServiceNow • West Palm Beach, FL

6d

About The Position

The Staff Compliance Analyst contributes to and executes the certification strategy defined by Security Compliance leadership. The role maintains existing third-party assurance programs and analyzes and supports adoption of new programs as directed by ServiceNow leadership. It works collaboratively with Sales, Security, and Operations teams.

The analyst monitors ServiceNow controls by understanding their intent and implementation, and drives organizational change through effective testing. As a member of the ServiceNow Security Organization, the analyst helps define the security and compliance framework for a leading cloud company, analyzes complex problems, and provides pragmatic solutions and recommendations. The role also calls for understanding how AI can be used to scale compliance.

Compliance initiatives include regional programs such as Spanish ENS, French HDS, Italy QC2, and UK Cyber Essentials Plus, as well as global programs such as ISO 27001, ISO 27018, PCI, and SOC 2. The role drives and measures compliance for cloud business systems, control areas, processes, and products.

Requirements

• At least 8 years of experience in cybersecurity compliance, security risk, audit, or similar work, together with education.
• Direct and recent working experience with at least three of the following compliance programs: ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX, C5 in Germany, and/or SOC 2.
• Experience working in a Security and Compliance group at a SaaS/cloud company or with the Security and Risk practice of a Big Four firm.
• Experience working on large projects.
• Experience using a GRC system.
• Excellent report-writing skills, including preparing compliance reports and associated metrics.
• Excellent verbal and written communication skills.
• Ability to work effectively with other members of the GRC organization to drive results.
• Experience leveraging or critically considering how to integrate AI into work processes, decision-making, or problem-solving; examples may include AI-powered tools, workflow automation, AI-driven insights, or exploring AI’s potential impact.

Nice To Haves

• Relevant professional certifications such as CISSP, CISA, or CISM.

Responsibilities

• Perform activities to help measure and monitor compliance with company policies and procedures.
• Facilitate certifier requests and gather information for external and internal audits.
• Lead onsite and remote certification and customer audits.
• Conduct activities to comply with Government Cyber Security requirements within EMEA.
• Drive security compliance testing activities across teams within the organization.
• Liaise with Risk Management and conduct security risk assessment activities.
• Help customers understand ServiceNow’s security and compliance control environment.
• Contribute to improving the GRC tool and processes to meet compliance business needs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed