Compliance Analyst, US Compliance Programs
Remote · United States
Job Summary
Compliance Analyst role focused on building, implementing, and scaling Spellbook's US compliance program across government, healthcare, financial services, and enterprise SaaS customers. Responsibilities include driving readiness for frameworks such as TX-RAMP, GovRAMP, FedRAMP, HIPAA, SOC 2; managing audit evidence and documentation in platforms like Vanta; coordinating with external auditors and stakeholders; leading government compliance initiatives; maintaining policies, risk registers, and system inventories; translating customer requirements and regulatory guidance into practical internal processes; collaborating with Sales and Customer Success on security questionnaires and due diligence; and defining repeatable compliance workflows while leveraging AI and tooling to accelerate program execution.
Required Qualifications
- US Citizenship and a non-expired US Passport or state-issued REAL ID driver's license
- Experience in compliance, security assurance, GRC, audit, risk management, privacy or related function
- Familiarity with security/compliance frameworks such as SOC 2, ISO 27001, NIST 800-53, NIST CSF, HIPAA, FedRAMP, TX-RAMP, GovRAMP
- Hands-on experience collecting audit evidence, maintaining control documentation, tracking remediation, and supporting assessments
- Experience using compliance automation or GRC platforms (e.g., Vanta, Linear or similar)
- Strong ability to translate framework requirements into actionable project plans
- Experience partnering with technical teams to understand systems, access controls, data flows, and security control implementation
- Excellent written and verbal communication skills for diverse audiences
- Highly organized with ability to manage multiple workstreams and deadlines
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.