Security and Compliance Analyst

About the role

Nakisa is looking for a detail‑oriented Security and Compliance Analyst to support its global security initiatives. The role focuses on maintaining compliance with standards such as SOC 1, SOC 2, ISO/IEC 27001 and data‑privacy regulations while collaborating with internal teams and external auditors.

Key responsibilities

• Coordinate and manage tasks for SOC 1, SOC 2 and ISO 27001 audit programs.
• Collect, organize and validate audit evidence and documentation with stakeholders and auditors.
• Drive continuous improvement of internal processes, controls and compliance documentation.
• Prepare security and compliance sections of RFPs, RFIs and due‑diligence questionnaires.
• Contribute to internal information‑security projects and process enhancements.
• Monitor compliance deadlines, audit deliverables and remediation actions.
• Stay updated on evolving security frameworks, regulatory requirements and AI‑related security practices.
• Educate employees on security awareness through training and communications.

Required profile

• Bachelor’s degree in information security, cybersecurity, information systems, computer science or equivalent experience.
• Solid knowledge of SOC 1/2, ISO/IEC 27001/27017, CIS Controls and data‑protection regulations (GDPR, PIPEDA, CCPA).
• Strong reporting and documentation abilities, with experience generating audit reports and compliance documentation.
• Excellent attention to detail, ability to identify gaps and meet strict deadlines.
• Effective verbal and written communication skills for cross‑functional collaboration.

Required skills

• SOC 1, SOC 2, ISO/IEC 27001, ISO/IEC 27017, CIS Controls
• GDPR, PIPEDA, CCPA
• Microsoft Excel, Word, PowerPoint, PDF tools
• Cloud platforms: AWS, Azure, GCP
• Access controls, encryption, security operations
• Basic understanding of AI implications for security and compliance