Senior IT Compliance Analyst
SailPoint · Austin, TX
- On site
- Full-time
- $148,000 / year
- Austin, TX
This role may have been filled. Drop your résumé and we'll check if it's still open — or find you similar roles.
Job highlights
- Manage IT compliance programs across multiple frameworks.
- Conduct risk assessments and implement remediation plans.
- Oversee control testing and support internal/external audits.
- Ensure adherence to GDPR and data privacy regulations.
- Develop and maintain IT policies and procedures.
About the role
About Us:
SailPoint is the leader in Identity Security for the enterprise. We’re committed to protecting organizations from an ever-evolving threat landscape and helping them govern every single identity and its access. SailPoint has been consistently rated one of the “best places to work” in Austin over the past 15 years!
Position Overview:
We are seeking a highly motivated and experienced Sr. IT Compliance Analyst to join our growing team. The ideal candidate will have a strong background in IT compliance and a deep understanding of various regulatory frameworks, including NIST 800-53, ISO 27001, SOX, GDPR, and FedRAMP. In this role, you’ll blend regulatory compliance expertise with the implementation of access controls, ensuring our systems and processes meet the highest standards of security and assurance. Expect to work cross-functionally within IT, and across our Cloud Operations, Cybersecurity, Product and Engineering teams to maintain trust and enable secure, scalable growth.
Key Responsibilities:
- Compliance Framework Management: Implement, maintain, and continually improve our IT compliance programs, with a focus on NIST 800-53, ISO 27001, SOX, GDPR, and FedRAMP.
- Risk Assessments: Conduct comprehensive risk assessments to identify potential compliance gaps and vulnerabilities. Develop and implement remediation plans to address identified risks.
- Control Testing & Auditing: Design and execute control testing procedures to validate the effectiveness of our IT controls. Liaise with internal and external auditors to facilitate audits and ensure timely resolution of audit findings.
- FedRAMP Compliance: Manage the FedRAMP authorization process, including the development and maintenance of System Security Plans (SSPs) and continuous monitoring activities.
- SOX Compliance: Oversee IT General Controls (ITGCs) for Sarbanes-Oxley (SOX) compliance, including access controls, change management, and IT operations.
- ISO 27001 Certification: Maintain and enhance our Information Security Management System (ISMS) to ensure ongoing compliance with ISO 27001 standards.
- GDPR and Data Privacy: Ensure adherence to GDPR and other global data privacy regulations. Conduct Data Protection Impact Assessments (DPIAs) and support privacy-by-design principles.
- Policy and Procedure Development: Develop and maintain IT policies, standards, and procedures to support compliance requirements.
- Reporting and Documentation: Prepare and present compliance reports to management. Maintain accurate and comprehensive documentation of compliance policies and standards.
- Training and Awareness: Promote a culture of compliance by providing training and awareness programs to employees.
Qualifications:
- 4+ years of experience in an IT compliance, IT audit, or risk management role.
- In-depth knowledge and hands-on experience with the following frameworks: NIST 800-53, ISO 27001, Sarbanes-Oxley (SOX), General Data Protection Regulation (GDPR), FedRAMP (Moderate or High).
- Proven experience with risk assessment methodologies and control testing.
- Strong understanding of IT governance and control principles.
- Excellent project management and organizational skills.
- Exceptional written and verbal communication skills.
Preferred Qualifications:
- Strong background in Identity Security and/or Privileged Access Management.
- Familiarity with using and implementing SailPoint products and services.
- Strong background in scripting and automation.
- Proficient with the use and governance of Artificial Intelligence.
Education and Certifications:
A bachelor’s degree in information technology, Cybersecurity, Business Administration, or equivalent professional experience. Relevant professional certifications such as CISA, CISSP, CISM, CRISC, or similar are highly desirable.
Path to Success:
First 30 Days: Understand compliance landscape (SOC 2, SOX ITGCs, FedRAMP, NIST, ISO 27001). Review key controls including User Access Reviews (UAR) and SailPoint ISC certification campaigns. Begin building or enhancing SailPoint ISC knowledge through hands-on learning or instructor-led training. Deliver initial gap analysis covering compliance posture, audit readiness, and automation opportunities.
By 60 Days: Execute key controls including UARs using SailPoint ISC certification campaigns and access governance processes. Collaborate with internal auditors to support SOC, SOX, and FedRAMP audits. Apply SailPoint ISC capabilities and automation (workflows, certifications, reporting) to improve efficiency. Enhance policies, procedures, and compliance documentation aligned to regulatory requirements.
By 90 Days: Own IT compliance program across SOC 2, SOX, FedRAMP, ISO 27001, and GDPR. Act as primary liaison for auditors and drive timely remediation of audit findings. Optimize controls (including UAR) using SailPoint ISC, automation, and AI-driven insights. Develop advanced dashboards and reporting on compliance, risks, and audit outcomes.
Benefits and Compensation:
Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint. As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-mid-max, USD): $87,900 - $148,090.00 Base salaries for employees based in other locations are competitive for the employee’s home location.
Benefits Overview:
- Health and wellness coverage: Medical, dental, and vision insurance
- Disability coverage: Short-term and long-term disability
- Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
- Additional life coverage options: Supplemental life insurance for employees, spouses, and children
- Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
- Financial security: 401(k) Savings and Investment Plan with company matching
- Time off benefits: Flexible vacation policy
- Holidays: 8 paid holidays annually
- Sick leave
- Parental support: Paid parental leave
- Employee Assistance Program (EAP) and Care Counselors
- Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
- Health Savings Account (HSA) with employer contribution
Equal Opportunity Employer:
SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.
Alternative Application Methods:
Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact applicationassistance@sailpoint.com or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations. NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.
Key skills/competency:
- IT Compliance
- NIST 800-53
- ISO 27001
- SOX
- GDPR
- FedRAMP
- Risk Assessment
- Control Testing
- Auditing
- Identity Security
Skills & topics
- IT Compliance Analyst
- NIST 800-53
- ISO 27001
- SOX
- GDPR
- FedRAMP
- Risk Assessment
- Control Testing
- IT Audit
- Identity Security
How to get hired
- Tailor your resume: Highlight your experience with NIST 800-53, ISO 27001, SOX, GDPR, and FedRAMP. Quantify achievements in risk assessment and control testing.
- Craft a compelling cover letter: Emphasize your understanding of SailPoint's leadership in Identity Security and your passion for compliance.
- Prepare for technical questions: Be ready to discuss specific compliance frameworks, risk methodologies, and audit procedures.
- Demonstrate collaboration skills: Provide examples of how you've worked with IT, Cybersecurity, and Engineering teams.
- Research SailPoint's culture: Understand their commitment to being a 'best place to work' and their focus on innovation.
Technical preparation
Behavioral questions
Frequently asked questions
- What are the key compliance frameworks for the Senior IT Compliance Analyst role at SailPoint?
- The Senior IT Compliance Analyst role at SailPoint requires in-depth knowledge and hands-on experience with NIST 800-53, ISO 27001, SOX, GDPR, and FedRAMP (Moderate or High).
- What is the estimated salary range for a Senior IT Compliance Analyst at SailPoint in the US?
- For US-based employees, the estimated base salary range for this role is $87,900 - $148,090.00 annually, with potential eligibility for bonuses and equity.
- What are the primary responsibilities of the Senior IT Compliance Analyst at SailPoint?
- Key responsibilities include managing compliance framework implementation and improvement, conducting risk assessments, designing and executing control testing, managing FedRAMP and SOX compliance, maintaining ISO 27001 certification, ensuring GDPR adherence, and developing policies and procedures.
- What educational background and certifications are preferred for this role?
- A bachelor’s degree in information technology, Cybersecurity, Business Administration, or equivalent is required. Professional certifications like CISA, CISSP, CISM, or CRISC are highly desirable.
- How does SailPoint support employee growth and development in this role?
- SailPoint provides a structured 'Path to Success' with defined goals for the first 30, 60, and 90 days, including opportunities to understand the compliance landscape, enhance SailPoint ISC knowledge, and own the IT compliance program.
- What is SailPoint's approach to diversity and inclusion in hiring?
- SailPoint is an equal opportunity employer committed to diversity and inclusion. They welcome all qualified candidates and provide consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
- How can someone with a disability apply for the Senior IT Compliance Analyst position at SailPoint?
- Individuals unable to submit an application through the website due to a disability can contact applicationassistance@sailpoint.com or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations.
- What kind of benefits does SailPoint offer its employees?
- SailPoint offers a comprehensive benefits package including health and wellness coverage (medical, dental, vision), disability and life insurance, flexible spending accounts, 401(k) with company matching, generous time off, paid parental leave, and an Employee Assistance Program.