Compliance Analyst

<p>We’re a global team of over 400 people, working together to push the boundaries of open-source technology and multi-cloud solutions. Our vision is to help developers, builders, and creators bring their ideas to life with speed and simplicity, by providing a cloud data platform that makes open-source databases, search, streaming, and application infrastructure easily accessible to everyone.</p> <h3><strong>The Role:</strong></h3> <p>We are seeking a proactive and detail-oriented <strong>Compliance Analyst</strong> to join our Security & Compliance team. This is an ideal opportunity for someone early in their career who wants to build a foundation in cloud compliance, audit, and customer trust, or someone at an intermediate level looking for a change. </p> <p>You’ll work alongside experienced compliance engineers and auditors to keep Aiven’s certifications healthy, support our internal teams in following sound processes, and help our customers get the assurance they need to trust us with their data.</p> <h3><strong>What You’ll Do:</strong></h3> <p>This role spans evidence operations, audit support, third-party oversight, and customer-facing trust work:</p> <h5><strong>Audit Support and Evidence Collection:</strong></h5> <ul> <li>Evidence Gathering: Partner with engineering, IT, People Operations, and other stakeholders to collect, organize, and validate evidence required for SOC 2, ISO 27001, PCI DSS, and GDPR/privacy programs.</li> <li>Auditor Coordination: Act as a day-to-day point of contact for external auditors during fieldwork — fulfilling sample requests, walking through controls, and tracking open items to closure.</li> <li>Continuous Compliance: Maintain control evidence in our GRC tooling on an ongoing basis so audits aren’t a fire drill. Flag drift or expiring evidence early.</li> </ul> <h5><strong>Internal Audit and Process Improvement:</strong></h5> <ul> <li>Internal Audit Activities: Assist with internal control testing, sampling, and walkthroughs across the year. Document findings clearly and track remediation with control owners.</li> <li>Process Partnership: Work with internal teams (engineering, IT, People Operations, vendor management) to translate compliance requirements into pragmatic, day-to-day process. Help teams <em>meet</em> controls without slowing them down.</li> <li>Policy and Documentation Hygiene: Assist with reviewing, updating, and version-controlling security and compliance policies, standards, and procedures.</li> </ul> <h5><strong>Third-Party Risk and Due Diligence:</strong></h5> <ul> <li>Material and Critical Third Parties: Help maintain Aiven’s inventory of material and critical third-par