Analyst Governance Risk & Compliance

Role overview Help maintain cybersecurity compliance across a portfolio of products by assessing controls, coordinating audits, and improving the processes and documentation used to demonstrate compliance. The role combines project-based compliance work with audit activity and calls for clear communication of risk to technical and business stakeholders. It is a remote position based in Ukraine, working with an international cybersecurity team.

Responsibilities - Assess gaps against ISO 27001, ISO 27701, SOC 2, and NIST 800-171, then recommend practical process, documentation, or tooling improvements. - Conduct internal audits and support internal and external audit activity, coordinating with stakeholders and external auditors. - Maintain and improve a shared control framework, compliance scope, annual policies, and the integrated management system. - Report audit results, risk trends, metrics, and corrective action plans to senior leaders. - Improve compliance processes across frameworks and contribute to risk assessment and management activities. - Gather information from varied sources, evaluate business and technical risk, and present findings in a way suited to the audience.

Requirements - At least two years of experience with ISO 27001, ISO 27701, SOC 2, or NIST 800-171, plus experience in risk, information security, or systems administration in a large international software environment. - Working knowledge of security frameworks, control design, audits, risk scoring, and gap analysis. - Strong written and spoken English, with the ability to write policies and explain technical risks to different audiences. - Experience collecting and analyzing information from multiple sources and preparing clear reports. - Intermediate familiarity with Windows and Linux/Unix, major cloud platforms, scripting, and Splunk queries. - Organized, analytical, and adaptable, with the ability to work independently and collaborate across a global team.

Nice to have - A degree in data science, computer science, or engineering; ISO 27001 internal or lead auditor credentials or equivalent experience. - Security certifications such as Security+ or GSEC. - Experience with Jira Service Desk and using AI to reduce manual compliance work.