Senior Security Compliance Analyst

Iterable is the leading AI-powered customer engagement platform that helps leading brands like Redfin, SeatGeek, Priceline, Calm, and Box create dynamic, individualized experiences at scale. Our platform empowers organizations to activate customer data, design seamless cross-channel interactions, and optimize engagement—all with enterprise-grade security and compliance. Today, nearly 1,200 brands across 50+ countries rely on Iterable to drive growth, deepen customer relationships, and deliver joyful customer experiences.

Our success is powered by extraordinary people who bring our core values—Trust, Growth Mindset, Balance, and Humility—to life. We foster a culture of innovation, collaboration, and inclusion, where ideas are valued and individuals are empowered to do their best work. That’s why we’ve been recognized as one of Inc’s Best Workplaces and Fastest Growing Companies, and were recognized on Forbes’ list of America’s Best Startup Employers in 2022. Notably, Iterable has also been listed on Wealthfront’s Career Launching Companies List and has held a top 10 ranking on the Top 25 Companies Where Women Want to Work.

With a global presence—including offices in San Francisco, New York, Denver, London, and Lisbon, plus remote employees worldwide—we are committed to building a diverse and inclusive workplace. We welcome candidates from all backgrounds and encourage you to apply. Learn more about our story and mission on our Culture and About Us pages. Let’s shape the future of customer engagement together!

The Team:

Customers trust Iterable with their marketing and sensitive information, expecting us to safeguard their data. Iterable's security team leads a cross-functional effort across the company to ensure that all systems remain secure in support of Iterable's core values, and to provide assurance to our customers that we will be the good stewards of their valued data. The Iterable security team actively collaborates and leads the effort to build Iterable's security architecture in concert with other groups as they develop or launch new features and services. As engineers, we believe in security through automation, our footprint spans across the entire company at all levels, from production to campus technology. 

The Role

Sr. Security Compliance Analyst - are motivated team players who ultimately will execute on work to ensure a positive security and compliance posture for Iterable.  This role will have the opportunity to work directly across all Governance Risk and Compliance programs by assisting with everything from external audits (such as SOC 2, ISO and privacy certifications) to risk assessments and to managing RFPs and Contract Reviews.  They will partner with various stakeholders across the organization to achieve the common goal of ensuring Iterable is able to meet our customers requirements for a secure organization. You’ll report directly to our Manager of Compliance. 

We're looking to expand our small but growing organization with teammates who are intellectually curious and willing to embrace challenges, all while keeping our company values of Humility, Trust, Growth Mindset, and Balance top of mind. 

One of our core values is a growth mindset and Iterable is a company where everyone can grow. If this is a role that excites you, please apply as we value applicants for the skills they bring beyond a job description.

Position Details:

• Conduct risk assessments to evaluate security, compliance, and operational risks across technical systems, third parties, and business processes.
• Engage with stakeholders across the organization to understand business processes, assess risks, and collaboratively determine risk ratings based on impact and likelihood.
• Assist with risk governance, working cross-functionally to identify, assess, and remediate security and privacy compliance risks.
• Analyze the technical and business impact of identified security and privacy risks, providing clear remediation guidance.
• Support compliance activities, including risk assessments, internal and external audits, and evidence gathering (e.g., SOC 2 Type 2, ISO 27001, CBPR, PRP).
• Support customer trust initiatives by managing security and privacy documentation, responding to cus