[Hiring] Compliance & Risk Analyst @Pebl

Role Description

The Compliance & Risk Analyst is responsible for supporting and executing the company’s compliance programs. This person works closely with the Security Engineering team, Legal organization, and all business units, including Technology, Operations, Sales, and others.

• Assist with industry and client audits, internal assessments, and compliance requests, including but not limited to SOC1, SOC2, ISO, and Privacy.
• Support risk identification and management across the company.
• Assist with information security initiatives to protect both Pebl and customer data.
• Contribute to broader security platforms and initiatives as opportunities arise.

Key Responsibilities

• Compliance & Risk Support
  • Lead and own the SOC audits including SOC 1 Type II, SOC 2 Type II, ISO 27001 and others with all Trust Service Criteria.
  • Partner with Legal teams with privacy readiness efforts aligned with U.S. and international regulations (e.g., CCPA, GDPR), including data breach response preparedness.
  • Assist with Governance, Risk, and Compliance (GRC) program activities, including monitoring control effectiveness and remediation tracking.
  • Maintain and update policies, standards, and procedures.
  • Support client third-party management requests and assessments.
  • Assist with vendor risk management and other compliance-related initiatives as directed.
• Security Program Support
  • Support security initiatives as needed across the Risk & Security team.
  • Assist in monitoring, reporting, and documentation of security systems and controls.
  • Monitor remediation activities related to penetration testing and application security assessments.
• Operational Responsibilities
  • Participate in incident response for privacy and data subject requests.
  • Prepare compliance and risk reports for management and clients.
  • Assist in handling audit inquiries and evidence collection.
  • Support Business Continuity and Disaster Recovery (BCDR) testing.
  • Perform additional duties as assigned.

Qualifications

• Bachelor’s degree in Compliance, Audit, Cybersecurity, Information Security, Information Technology, Computer Science, or a related field, or equivalent professional experience.
• Minimum of 4 years of experience in compliance, audit, security, or risk management.
• Understanding of privacy regulations (e.g., CCPA, GDPR).
• Competency in supporting audit and compliance processes.
• Strong organizational and time-management skills.
• Ability to create and maintain policies, procedures, and documentation.

Preferred Skills And Experience

• Hands-on experience with SOC 2, ISO 27001, TX-RAMP, or other audit/compliance frameworks.
• Exposure to risk and security frameworks such as NIST CSF, NIST RMF, or ISO 27001.
• Experience supporting third-party assessments or client compliance requests.
• Familiarity with business continuity or incident response planning and testing.
• Experience collaborating across cross-functional teams in a technical environment.

Key Competencies and Attributes

• Detail-oriented and proactive.
• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.
• Professional judgment and discretion with sensitive information.
• Collaborative mindset and willingness to learn.
• Ability to manage multiple priorities in a fast-paced environment.

Benefits

• Flexible Time Off – Take the time you need to recharge.
• Parental Leave – Support for growing families.
• Health and Dental Insurance – Where applicable, to cover you and your loved ones.
• Retirement Savings + Employee Incentive Plan – Plan for the future while sharing our success.