Horizon3.ai

2 days ago

Senior Compliance Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Own SOC 2 Type II compliance efforts end to end, including control mapping, evidence collection, and audit coordination. Continuously improve the control environment across SOC 2 and frameworks such as ISO 27001, NIST 800-53, NIST AI RMF, and DORA. Lead GDPR/CCPA/CPRA and EU AI Act privacy compliance through RoPAs, DSARs, and PIAs, manage vendor/third-party risk, and respond to customer security questionnaires, RFPs, and due diligence requests.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Serve as internal lead for SOC 2 Type II compliance efforts, including control mapping, evidence collection, and audit coordination.
•Maintain and improve the control environment to ensure continuous compliance across SOC 2 and other frameworks (ISO 27001, NIST AI RMF, DORA, NIST 800-53).
•Oversee the privacy program to ensure compliance with GDPR, CCPA/CPRA, EU AI Act, and emerging U.S. state privacy laws, including RoPAs, DSARs, and PIAs.
•Own third-party/vendor risk management lifecycle activities, including onboarding reviews, periodic reassessments, and contract/privacy reviews.
•Respond to customer security questionnaires, RFPs, and due diligence requests, leveraging documentation like SOC 2 reports and DPAs.

Pay and Benefits

Salary: USD 109,000 - 135,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceVisionDentalParental Leave

Key Requirements

•4–6+ years of experience in security compliance, risk, or privacy in a B2B SaaS or cybersecurity environment.
•Deep understanding of compliance frameworks (SOC 2, ISO 27001, NIST AI RMF, NIST 800-53) and experience leading annual audits.
•Expertise in GDPR, CCPA/CPRA, EU AI Act, and emerging U.S. state data privacy laws.
•Working knowledge of third-party risk management and vendor due diligence processes.
•Experience responding to security questionnaires, RFPs, and customer audits.

Experience:4+ yearsB2B SaaSCybersecurity

Skills:CommunicationStakeholder management

Certifications:CIPP/USCIPTCISACRISCISO Lead Implementer

Tech Stack:SOC 2ISO 27001NIST AI RMFNIST 800-53DORAGDPRCCPA/CPRAEU AI ActRoPAsDSARsPIAsAWSOktaMDMSIEMDLP

Company Brief

Horizon3.ai

Builds NodeZero®, an autonomous penetration-testing platform that continuously finds, prioritizes, and verifies exploitable vulnerabilities across on-premises, cloud, and hybrid environments to help organizations reduce security risk.

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series D

Headquarters: San Francisco, United States

Founded: 2019

Glassdoor: 4.9

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Horizon3.ai

2 days ago

Senior Compliance Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Mid level

Key Responsibilities

•Serve as internal lead for SOC 2 Type II compliance efforts, including control mapping, evidence collection, and audit coordination.
•Maintain and improve the control environment to ensure continuous compliance across SOC 2 and other frameworks (ISO 27001, NIST AI RMF, DORA, NIST 800-53).
•Oversee the privacy program to ensure compliance with GDPR, CCPA/CPRA, EU AI Act, and emerging U.S. state privacy laws, including RoPAs, DSARs, and PIAs.
•Own third-party/vendor risk management lifecycle activities, including onboarding reviews, periodic reassessments, and contract/privacy reviews.
•Respond to customer security questionnaires, RFPs, and due diligence requests, leveraging documentation like SOC 2 reports and DPAs.

Pay and Benefits

Salary: USD 109,000 - 135,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceVisionDentalParental Leave

Key Requirements

•4–6+ years of experience in security compliance, risk, or privacy in a B2B SaaS or cybersecurity environment.
•Deep understanding of compliance frameworks (SOC 2, ISO 27001, NIST AI RMF, NIST 800-53) and experience leading annual audits.
•Expertise in GDPR, CCPA/CPRA, EU AI Act, and emerging U.S. state data privacy laws.
•Working knowledge of third-party risk management and vendor due diligence processes.
•Experience responding to security questionnaires, RFPs, and customer audits.

Experience:4+ yearsB2B SaaSCybersecurity

Skills:CommunicationStakeholder management

Certifications:CIPP/USCIPTCISACRISCISO Lead Implementer

Tech Stack:SOC 2ISO 27001NIST AI RMFNIST 800-53DORAGDPRCCPA/CPRAEU AI ActRoPAsDSARsPIAsAWSOktaMDMSIEMDLP

Company Brief

Horizon3.ai

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Funding: Series D

Headquarters: San Francisco, United States

Founded: 2019

Glassdoor: 4.9

Website LinkedIn Glassdoor