Sr. Compliance Analyst

We are seeking a highly skilled Senior Compliance Analyst to join our compliance and risk management team. This role is responsible for ensuring the organization's adherence to key regulatory and industry frameworks, including ISO 27001, SOC 2 Type II, J-SOX, and data privacy regulations such as GDPR and CCPA. The ideal candidate will have a strong background in IT governance, risk management, compliance (GRC), and data protection. They will work cross-functionally to assess risks, enhance internal controls, and support audit and regulatory compliance efforts.

General Job Duties:

Compliance & Risk Management:

• Lead and support the implementation, monitoring, and continuous improvement of ISO 27001, SOC 2 Type II, J-SOX, GDPR, and CCPA compliance programs.
• Conduct risk assessments to identify compliance gaps and develop remediation plans.
• Ensure the organization meets data privacy requirements by implementing and maintaining processes aligned with GDPR, CCPA, and other applicable regulations.
• Develop, review, and maintain compliance policies, procedures, and documentation in alignment with regulatory standards.
• Collaborate with IT, security, legal, finance, and data privacy teams to ensure compliance across the organization.
• Oversee third-party vendor risk assessments to confirm adherence to security and privacy regulations.

Audit & Assessment:

• Act as a primary point of contact for internal and external audits related to ISO 27001, SOC 2, J-SOX, GDPR, and CCPA.
• Prepare and coordinate audit documentation, evidence collection, and management responses for regulatory and certification audits.
• Monitor and track remediation plans to address audit findings and ensure timely resolution.
• Conduct internal compliance audits to validate controls and ensure operational effectiveness.

Governance, Privacy, & Security Awareness:

• Assist in developing and delivering compliance and data privacy training programs to promote awareness across the organization.
• Monitor regulatory changes and advise on best practices for compliance, security, and privacy.
• Work closely with senior leadership to provide compliance updates and risk reporting.

Required Qualifications:

• Must be eligible to work in the USA long term without sponsorship.
• Bachelor's degree in Information Security, Compliance, Law, Finance, or a related field.
• 4+ years of experience in compliance, IT risk management, data privacy, or internal audit, with a focus on ISO 27001, SOC 2 Type II, J-SOX, GDPR, and CCPA.
• Strong understanding of IT security principles, privacy regulations, risk frameworks, and internal controls.
• Experience working with regulators, auditors, and managing compliance assessments.
• Ability to interpret and implement data protection laws, including GDPR and CCPA.
• Excellent communication skills with the ability to engage stakeholders at all levels.
• Strong analytical and problem-solving skills.

Preferred Qualifications

• Certifications such as CISA, CIPM, CIPT, CIPP/E, CISSP, CISM, or ISO 27001 Lead Auditor.
• Experience with GRC tools and compliance management platforms.
• Knowledge of additional compliance frameworks like NIST, HIPAA, or PCI-DSS is a plus.

About Bastian

Bastian Solutions, a Toyota Automated Logistics company, is an independent material handling and robotics system integrator providing automated solutions for distribution, manufacturing, and order fulfillment centers around the world. Our team specializes in consulting, system design, project management, maintenance, and installation, while sourcing the best equipment and automation technology. We take great pride in providing exceptional service and flexibility to our customers.

In addition to exciting work at a growing company, we offer the following benefits:

• Health, Dental, and Vision Insurance
• 401(k) Retirement Plan with a company match
• Vacation/Holiday Pay
• Tuition Reimbursement
• Flexible Work Schedules
• Volunteer Work
• Professional Associations, Conferences and Subscriptions
• Company Meetings & Events
• Bastian Solutions does not work outside recruiting agencies. No solicitation phone calls please.