SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
ServiceNow's Security Organization is seeking a Staff Compliance Analyst to drive and execute the company's certification and compliance strategy. This is a key individual contributor role responsible for maintaining existing third-party assurance programs (ISO 27001, ISO 27018, PCI, SOC 2, UK Cyber Essentials Plus, Spanish ENS, French HDS, Italy QC2) and evaluating adoption of new compliance programs as directed by leadership.
You will work collaboratively across Sales, Security, and Operations teams to monitor ServiceNow's controls, understand their intent and implementation, and drive organizational change through effective testing and audit activities. Key responsibilities include performing compliance measurement and monitoring activities, facilitating certifier requests and information gathering for external and internal audits, leading onsite and remote audits (both certification and customer audits), conducting activities to comply with Government Cyber Security requirements within EMEA, driving security compliance testing across teams, liaising with Risk Management on security risk assessments, helping customers understand ServiceNow's security and compliance control environment, and contributing to enhancements of the GRC tool and processes.
The role requires deep expertise in cloud security compliance, ability to analyze complex problems and provide pragmatic solutions, and demonstrated capability to leverage AI to scale compliance operations. You will be expected to prepare compliance reports, communicate effectively with stakeholders, and work collaboratively within the GRC organization to drive results.
REQUIREMENTS:
- 8+ years working in cyber security compliance, security risk, audit, or similar experience plus education
- Direct and recent working experience with at least three of: ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX & C5 (Germany), SOC 2
- Prior experience working in Security and Compliance at a SaaS/Cloud company or with Security and Risk practice at a Big Four firm
- Experience leveraging or critically thinking about integrating AI into work processes, decision-making, or problem-solving
- Demonstrated experience working on large projects
- Experience using a GRC system
- Excellent report writing skills and ability to prepare compliance reports and metrics
- Excellent verbal and written communication skills
- Relevant professional certifications (CISSP, CISA, CISM) are desirable
- Ability to work effectively with GRC organization members to drive results
