Senior Compliance Analyst

With 1,000 intelligence professionals, over $300M in sales, and serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company!

Recorded Future is seeking a highly organized and detail-oriented Senior Compliance Analyst to join our growing Governance, Risk, and Compliance (GRC) team. In this role, you will be instrumental in supporting our ongoing compliance operations, helping to ensure alignment with key regulatory and industry frameworks including SOC 2, ISO/IEC 27001, and CMMC.

You will collaborate closely with technical, risk, and business teams to coordinate compliance initiatives, gather evidence, maintain documentation, and prepare for external audits. This is a cross-functional role that sits at the intersection of cybersecurity, risk management, and operations — ideal for someone who thrives in dynamic environments and can manage multiple priorities.

What You’ll Do: 

• Coordinate the collection and management of audit evidence across internal teams
• Maintain and organize evidence repositories and compliance documentation
• Track remediation efforts and follow up on open issues or audit findings
• Collaborate with engineering, IT, legal, and security teams to ensure accurate and timely documentation of compliance controls.
• Assist in maturing internal policies, procedures, and control frameworks
• Support internal readiness activities and continuous compliance monitoring efforts
• Communicate compliance requirements and deadlines effectively across stakeholders.
• Contribute to the improvement and automation of compliance workflows and tooling

What You’ll Bring: 

• 5+ years of experience of supporting internal readiness activities and continuous compliance monitoring efforts.
• Previous experience executing and planning compliance assessments and audits (e.g., SOC 2, ISO 27001, CMMC).
• Working knowledge of key compliance frameworks: SOC 2, ISO/IEC 27001, and CMMC.
• Strong organizational and time management skills; ability to juggle multiple priorities and deadlines
• Experience coordinating or supporting cross-functional initiatives, particularly across technical and risk teams
• Ability to synthesize complex information into clear documentation.
• High attention to detail and accuracy
• Strong written and verbal communication skills

Preferred Qualifications: 

• Experience with compliance operations in a SaaS or cybersecurity-focused organization
• Familiarity with risk management frameworks (e.g., NIST RMF, NIST 800-171)
• Relevant certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Implementer/Auditor
• Experience using GRC platforms (e.g., Vanta, Drata, OneTrust, ServiceNow GRC, etc.)
• Exposure to FedRAMP or DoD compliance programs is a plus

The base salary range for this full-time position is $109,500-$164,000. Our salary ranges are determined by role, level, and location. The salary displayed reflects the range for new hire salaries for the position across all US locations. Within the range, individual pay is determined by state, work location and additional factors, including job-related skills, experience, and relevant education or training. This position may be eligible for incentive compensation, equity, and medical, dental, vision, life insurance and 401K. Your recruiter can share more about the specific details of the compensation and benefit package during the hiring process.

Why should you join Recorded Future?
Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.6-star user rating on G2 and more than 50% of Fortune 100 companies as customers.

Want more info? 
Blog & Podcast: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence
Linkedin, Instagram & Twitter: What’s happening at Recorded Future
The Record: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field
Timeline: History of Recorded Future