Security Compliance Analyst

About the Role

Join Sumo Logic as a Security Compliance Analyst on the cutting edge of Cloud Security and Compliance. This role is critical to supporting existing compliance initiatives and managing audits for a fast growing, highly technical cloud based SaaS company.

Responsibilities

• Design, develop, and maintain internal controls for compliance goals (FedRAMP, SOC2, HIPAA, PCI-DSS, ISO27001, etc.).
• Perform security reviews and identify gaps in architecture with recommendations.
• Support tooling and automation to streamline security and compliance activities.
• Lead planning, coordination and execution of 3rd party risk assessments and audits.
• Develop and maintain internal and external facing security and compliance documentation.
• Collaborate with product, engineering, and internal teams for maintaining compliance baselines.
• Interface with external auditors as the primary contact and manage risk treatment plans.

Required Qualifications

• Experience in supporting compliance programs in a SaaS environment.
• Expertise in at least 2 frameworks: PCI-DSS, SOC2, HIPAA, ISO27001, or FedRAMP.
• Strong skills in communication, security controls, and privacy compliance.
• Ability to work cross-functionally and manage projects on time and budget.
• Knowledge in cybersecurity risk analysis and sales support for security discussions.

Desired Qualifications

• B.S. in Computer Science, Computer Security or related discipline.
• Relevant cybersecurity certifications (CRISC, CISM, CISSP, etc.).
• Experience with public cloud environments, incident response, and internal audits.

About Sumo Logic

Sumo Logic unifies critical security and operational data, enabling digital teams to detect, investigate, and resolve modern cybersecurity and cloud operations challenges. Trusted globally, Sumo Logic is dedicated to protecting digital environments through innovative AI-powered SIEM and log analytics.

Key skills/competency

Cloud Security, Compliance, SaaS, FedRAMP, SOC2, HIPAA, PCI-DSS, ISO27001, Risk Management, Auditing