Grazitti Interactive - Compliance Analyst II

Job Description

We are looking for a detail-oriented and proactive Compliance Analyst II to join our Information Security Group at Grazitti Interactive.

In this role, you will contribute to the ongoing success of our compliance programs by executing audits, conducting risk assessments, and ensuring adherence to global regulatory standards.

You will collaborate with cross-functional teams to align operations with frameworks such as ISO 27001, ISO 27701, and NIST.

If you have a strong understanding of governance, risk, and compliance, and enjoy making an impact through policy, process, and stakeholder engagement, this role is for you.

Key Skills:

- 2-3 years of experience in compliance, risk management, or a related function.

- Working knowledge of ISO 27001, ISO 27701, and NIST frameworks.

- Strong analytical thinking and problem-solving capabilities.

- Excellent written and verbal communication skills.

- Proficiency in documentation and record-keeping.

- Ability to work independently and collaboratively across departments.

- Familiarity with GDPR, CCPA, HIPAA, and ITGC regulations.

- Advanced certifications such as CCEP, CISA, or ISO 27001 Lead Auditor.

- Experience drafting or maintaining compliance documentation and audit reports.

- Hands-on exposure to risk management tools or GRC platforms.

- Proficiency in MS Office (Excel, Word, PowerPoint).

- Ability to support junior team members and lead smaller compliance initiatives.

Roles And Responsibilities:

- Execute internal audits, compliance reviews, and risk assessments with minimal supervision.

- Support the creation, implementation, and continuous improvement of compliance policies and procedures.

- Monitor and analyze regulatory updates and ensure policy alignment.

- Maintain accurate documentation for all audits and compliance activities.

- Collaborate with cross-functional teams to embed compliance best practices across departments.

- Assist in developing compliance awareness programs and training materials.

- Provide regular updates to stakeholders on GRC initiatives, audit progress, and compliance posture.