Security Compliance Analyst

Filevine
Salt Lake City
Workplace: HybridFull timeFunction: Legal, Risk & ComplianceExperience: 4+ yearsEducation: bachelorsSkills: ["Attention to detail","Partnering","Teamwork","Quality performance","Communication"]

Join the IT Audit/Information Security team to ensure Filevine’s platform, applications, and infrastructure meet high-security compliance standards. You’ll conduct and manage audits and risk assessments aligned to industry best practices, assess technical security controls, support compliance with frameworks such as ISO and FedRAMP, and work cross-functionally with Information Security, Legal, HR, Compliance, and Development to drive secure coding and risk mitigation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Filevine
Filevine
4 years ago

Security Compliance Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 28 minutes agoStatus: Live

Job Summary

Join the IT Audit/Information Security team to ensure Filevine’s platform, applications, and infrastructure meet high-security compliance standards. You’ll conduct and manage audits and risk assessments aligned to industry best practices, assess technical security controls, support compliance with frameworks such as ISO and FedRAMP, and work cross-functionally with Information Security, Legal, HR, Compliance, and Development to drive secure coding and risk mitigation.
Location: Salt Lake City
Workplace: Hybrid
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Ensure Filevine’s platform, applications, and infrastructure are compliant and secured at high levels to protect customer trust.
  • •Manage security audits and compliance efforts, including risk assessment alignment with industry standards and best practices.
  • •Maintain and apply audit frameworks and risk assessment methodologies to identify and mitigate security vulnerabilities and business risks.
  • •Support compliance requirements across HIPAA, SOC 2, and other compliance frameworks, coordinating with internal teams.
  • •Conduct and facilitate penetration testing and auditing efforts, manage audit findings to resolution, and maintain policy/procedure libraries for compliance.

Pay and Benefits

Perks:Health InsuranceDentalVisionPaid LeaveLong-term Disability

Key Requirements

  • •Bachelor’s degree (or equivalent) in Computer Science, Computer Engineering, Information Technology, or a related field.
  • •4+ years of experience in IT auditing, compliance analysis, and/or risk assessment methodologies.
  • •Proven experience as an IT Audit & Risk Assessor with attention to security details.
  • •Experience assessing, testing, or auditing technical IT and security controls.
  • •Working knowledge of and demonstrated experience with ISO 27701, ISO 27018, and ISO 27001.
Experience:4+ yearsGRCCompliance frameworksRisk assessment
Education:Bachelor's
Skills:Attention to detailPartneringTeamworkQuality performanceCommunication
Certifications:GRC tool CertificationCISSPCISMCISACIPP/USCRISC
Tech Stack:OWASP Top 10ISO 27701ISO 27018ISO 27001FedRAMPSOC 2HIPAA Security RuleCJISGDPRCCPA/CPRAAgileWaterfallWeb applicationsWeb servicesService Oriented ArchitecturesWeb databasesSecurity questionnairesPenetration testingGRC tools

Company Brief

Filevine
Provides cloud-based legal case management and practice management software for law firms and legal departments, offering document management, communication, reporting, and workflow automation to streamline case handling and client collaboration.
Industry: LegalTech
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: Salt Lake City, United States
Founded: 2014
WebsiteLinkedIn