[Hiring] Senior Compliance and Audit Analyst @Zayo Group

Role Description

The Senior Compliance and Audit Analyst role supports the organization’s security assurance, customer trust, audit support, and third-party risk management activities. The position is responsible for:

• Responding to customer security inquiries.
• Completing security questionnaires.
• Supporting security-related contract reviews.
• Providing approved audit evidence where appropriate.
• Maintaining customer-facing Trust Center content.
• Assisting with third party risk reviews.

The role works closely with various stakeholders to ensure security responses, customer commitments, vendor reviews, evidence, and public-facing security content are accurate, timely, and aligned with organizational policies, standards, and approved practices.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, Risk Management, or a related field, or equivalent professional experience.
• Minimum of six (6) years of experience in information security, compliance, customer assurance, third party risk management, audit support, contract support, customer service, vendor management, or a related role.
• Experience with common controls, control mapping, or cross-framework control alignment is preferred.
• Familiarity with ISO 27001, NIST SP 800-171, GDPR, and SOC 2 is required.
• Experience responding to customer security inquiries, due diligence requests, security questionnaires, RFP/RFI security sections, or similar information requests.
• Familiarity with security-related contract topics, including information security requirements, audit rights, incident notification, data protection, privacy, third party obligations, and compliance requirements.
• Ability to read and interpret organizational policies, standards, procedures, customer requirements, vendor documentation, audit materials, and contract language.
• Strong written communication skills, with the ability to provide clear, accurate, and professional responses.
• Strong attention to detail and the ability to identify inconsistencies, missing information, unclear language, non-standard commitments, or items requiring escalation.
• Ability to collaborate effectively with Legal, Security, Procurement, Sales, business owners, and technical subject matter experts.
• Strong organizational, documentation, and time management skills, with the ability to manage multiple requests, reviews, and deadlines.
• Experience using ServiceNow or similar ticketing, workflow, case management, or risk management tools preferred.
• Experience supporting third party risk management, vendor due diligence, supplier risk assessments, or vendor security reviews preferred.
• Proficiency with Microsoft Office, ServiceNow, knowledge management tools, and collaboration platforms.
• Professional certifications in cybersecurity, compliance, or risk-related areas are preferred but not required.

Requirements

• Support customer security inquiries, due diligence requests, security questionnaires, and RFP/RFI security sections using approved response content, templates, and guidance.
• Review, triage, track, and manage assigned customer security, audit evidence, contract review, and third party risk requests through ServiceNow or other approved systems.
• Coordinate with Security, Legal, Procurement, Sales, Product, business owners, and technical subject matter experts to gather, validate, and approve response content.
• Prepare clear, accurate, and customer-appropriate responses related to security controls, policies, standards, certifications, audit reports, privacy practices, and compliance activities.
• Assist with the review of customer and vendor contract language involving information security, privacy, audit rights, incident notification, data protection, compliance obligations, third party requirements, or control commitments.
• Compare customer and vendor security requirements against organizational policies, standards, approved positions, control capabilities, and risk guidance.
• Identify non-standard commitments, unclear requirements, control gaps, policy conflicts, or risk indicators and escalate them to the appropriate stakeholders for review.
• Assist with audit evidence where appropriate, ensuring evidence shared externally is accurate, current, approved, and authorized for release.
• Coordinate with control owners, audit teams, and internal stakeholders to gather, validate, track, and document audit evidence requests and related approvals.
• Support Third Party Risk Management (TPRM) activities by assisting with vendor and supplier security reviews, due diligence requests, risk assessments, renewal reviews, and ongoing monitoring activities.
• Review vendor-provided questionnaires, certifications, audit reports, policies, security documentation, and other assurance materials against established review criteria.
• Track third party risk assessment status, open questions, required documentation, approvals, risk decisions, exceptions, remediation items, and follow-up actions.
• Support the development and maintenance of publicly appropriate Trust Center content, including security, compliance, privacy, certification, audit, and assurance materials.
• Review Trust Center content to help ensure it remains accurate, current, customer-appropriate, and aligned with approved policies, standards, reports, and disclosures.
• Use and help maintain approved response libraries, standard security language, FAQs, Trust Center materials, third party risk guidance, and customer assurance content.
• Maintain accurate records of customer inquiries, questionnaire responses, contract review notes, audit evidence, Trust Center updates, third party assessments, escalations, approvals, and final outcomes.
• Support customer-facing or vendor-related follow-up discussions by preparing materials, documenting questions, and coordinating internal input.
• Monitor assigned requests to support timely completion, appropriate follow-up, and accurate reporting on status, volume, aging, and recurring themes.
• Identify recurring customer questions, vendor risk themes, response gaps, evidence request trends, Trust Center content needs, or process issues and share improvement recommendations with the team.
• Support internal process documentation and guidance related to customer security inquiry handling, security contract review, audit evidence coordination, Trust Center maintenance, and TPRM.

Benefits

• Excellent Health, Dental & Vision Insurance
• Retirement 401(k) Savings Plan
• Generous paid time off policy including paid parental leave