Senior Compliance Analyst

Responsibilities

• Own the full evidence collection lifecycle across all active audit and continuous compliance cycles
• Serve as the primary operational point of contact for external auditors during Stage 1, Stage 2, and surveillance audits
• Perform ongoing monitoring and periodic testing of implemented controls
• Maintain and update security policies, standards, and procedures
• Identify and implement opportunities to use AI tools to streamline evidence gathering and audit preparation
• Support compliance efforts related to AI regulations including EU AI Act, ISO 42001, and NIST AI RMF
• Partner with Engineering, IT, Legal, and Product to ensure compliance requirements are embedded into operational processes

Requirements

• 6+ years of experience in GRC, information security, risk management, or IT audit
• Strong understanding of SOC 2, ISO 27001, NIST CSF 2.0, and CIS Controls
• Proficiency with GRC platforms such as Drata, Vanta, AuditBoard, or ServiceNow GRC
• Familiarity with cloud environments (AWS, Azure, or GCP)
• Experience supporting external audits and managing RFI responses
• Working knowledge of privacy requirements like GDPR and CCPA/CPRA
• Demonstrated use of AI tools (LLMs, agents) for compliance workflows
• Automation-first mentality with experience in automated evidence collection

Preferred Qualifications

• Relevant certifications: CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Auditor
• Experience with AI governance frameworks (ISO 42001, NIST AI RMF, EU AI Act)
• Exposure to SOX ITGC cycles
• Programming or scripting skills in Python or JavaScript for automation
• Familiarity with policy-as-code and compliance-as-code approaches

About the Company

AlphaSense is a market intelligence platform that uses AI to help the world's most sophisticated companies remove uncertainty from decision-making. Trusted by over 6,000 enterprise customers, including a majority of the S&P 500, AlphaSense provides insights from equity research, company filings, news, and more.