Senior Security & Compliance Analyst

The role

The Senior Security & Compliance Analyst will support security, risk, compliance, vulnerability management, and AI governance programs. This role works across cloud and enterprise operations to ensure continuous improvement and alignment with various standards.

What you will do

• Support security and compliance programs aligned with ISO 27001, SOC 1, SOC 2, privacy, and emerging AI governance requirements.
• Coordinate and drive vulnerability remediation activities across Engineering, Cloud Operations, IT, and Product teams.
• Track and report security metrics including MTTR, overdue vulnerabilities, remediation trends, audit findings, and compliance dashboards.
• Follow up and escalate unresolved vulnerabilities, audit findings, and compliance gaps.
• Support continuous control monitoring, risk assessments, third-party risk management, policy management, access reviews, and audit activities.
• Respond to customer security and compliance due diligence requests, audits, and questionnaires.
• Support AI governance, security, and compliance initiatives.
• Evaluate AI-enabled solutions and third-party AI services for security, privacy, compliance, and responsible AI considerations.
• Monitor emerging cybersecurity threats, privacy regulations, and industry compliance requirements.
• Collaborate with cross-functional teams to drive remediation and continuous improvement initiatives.

Required qualifications

• 6–8 years of experience in Governance, Risk & Compliance (GRC), cybersecurity, information security, or risk management.
• Strong understanding of ISO 27001, SOC 1 / SOC 2, GDPR/privacy principles, vulnerability management, and security controls.
• Experience in Energy / Utilities sector security and compliance requirements (e.g., CEII or critical infrastructure requirements).
• Experience coordinating vulnerability remediation programs, tracking SLA compliance, MTTR metrics, and executive reporting.
• Experience supporting audits, customer security reviews, and compliance programs.
• Strong communication, organizational, stakeholder management, and follow-up skills.
• Ability to work independently and proactively drive outcomes across distributed teams.

Nice to have

• Familiarity with emerging AI governance, privacy, and security frameworks (e.g., ISO 42001, EU AI Act, responsible AI principles)
• CISSP, CISA, ISO 27001 Lead Implementer/Auditor, or similar certifications.
• AI governance/privacy certifications

About the company

Energy Exemplar is a global software company founded in 1999 in Adelaide, Australia. Their mission is empowering transformative energy decisions through a software portfolio including PLEXOS, Aurora, and Adapt2.