Remote opportunity at
AccelaSr. Compliance Analyst
Accela is seeking a Sr. Compliance Analyst to oversee the establishment, certification, and ongoing management of its ISO/IEC 27001:2022 program. This fully remote, full-time position reports…
Career Tools
About This Role
Accela is seeking a Sr. Compliance Analyst to oversee the establishment, certification, and ongoing management of its ISO/IEC 27001:2022 program. This fully remote, full-time position reports to the GRC Manager and functions as the primary subject matter expert for ISO 27001. The professional chosen will direct the creation and continuous enhancement of the Information Security Management System while collaborating closely with Information Security, IT, Engineering, Legal, HR, and other departments…
Job Description
Accela is seeking a Sr. Compliance Analyst to oversee the establishment, certification, and ongoing management of its ISO/IEC 27001:2022 program. This fully remote, full-time position reports to the GRC Manager and functions as the primary subject matter expert for ISO 27001. The professional chosen will direct the creation and continuous enhancement of the Information Security Management System while collaborating closely with Information Security, IT, Engineering, Legal, HR, and other departments to build controls, handle compliance tasks, coordinate certification audits, and preserve audit readiness.
For nearly twenty years, Accela has developed cloud-based government software solutions aimed at boosting efficiency, transparency, and citizen engagement for communities of various sizes. The company offers a flexible SaaS platform covering service request management, planning, and building. Ideal candidates will possess hands-on ISO 27001 implementation experience, solid project management abilities, and the capacity to independently guide cross-functional efforts while supporting broader governance, risk, and compliance goals.
The annual base salary for this position falls between $120,000 and $140,000, supplemented by a discretionary annual bonus target based on company and individual goal performance. Accela provides a comprehensive benefits program that includes flexible time off, health, dental, and vision coverage, a 401(k) plan with a company match, health savings and flexible spending accounts, family planning benefits, life and disability insurance, and various well-being resources.
Responsibilities
- Lead the complete implementation and certification process for the ISO/IEC 27001:2022 program
- Run gap assessments, define compliance criteria, and guide remediation tasks
- Set up and oversee the ISMS scope, objectives, and Statement of Applicability
- Manage external certification audits including preparation, evidence gathering, and finding remediation
- Perform information security risk assessments, maintain risk registers, and handle treatment plans
- Partner with control owners to design, assess, document, and track ISO 27001 controls
- Organize internal audits, management reviews, and corrective action workflows
- Draft and maintain security policies, procedures, standards, and ISMS records
- Maintain framework requirements, controls, risks, evidence, and remediation items inside Drata and other GRC platforms
- Coordinate with Information Security, IT, Engineering, HR, Legal, and Finance stakeholders to operationalize compliance expectations
Requirements
- At least 5 years of professional background in governance, risk and compliance, information security compliance, or security assurance
- Proven history of leading or substantially owning an ISO/IEC 27001 rollout and certification project
- Deep familiarity with ISO/IEC 27001:2022 standards, risk assessment, risk treatment, and audit procedures
- Background in preparing for and managing external certification audits and evidence collection
- Experience in writing and updating compliance policies, control documentation, and risk assessments
- Hands-on practice utilizing compliance automation platforms like Drata
- Strong project management, analytical, and organizational capabilities to direct complex initiatives independently
- Effective communication and stakeholder management skills to drive accountability across cross-functional teams
Qualifications
- Possession of an ISO/IEC 27001 Lead Implementer, Lead Auditor, CISA, CGRC, or comparable professional certification
- Working familiarity with SOC 2 Type II, GovRAMP, NIST SP 800-53, CIS Controls, or PCI DSS
- Bachelor degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related discipline
- Background supporting GRC functions within a SaaS, cloud technology, or enterprise software setting
- Familiarity with AWS or similar cloud environments alongside their respective security controls
Core Skills
Benefits
- Annual base salary ranging from $120,000 to $140,000
- Eligible for a discretionary annual bonus target tied to company and individual goal achievements
- Flexible time off policy
- Comprehensive medical, dental, and vision insurance plans
- Family planning benefits
- 401(k) retirement savings plan featuring a company match
- Health savings account with company contributions and flexible spending accounts
- Life, accident, and disability coverage
- Business travel insurance and employee assistance programs
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this role is explicitly designated as remote.
What is the salary range for the Sr. Compliance Analyst?
The annual base salary ranges from $120,000 to $140,000, and the position is also eligible for a discretionary annual bonus target.
What level of experience is required?
Candidates must have at least five years of experience in governance, risk and compliance, information security compliance, security assurance, or a related field, along with demonstrated experience leading an ISO/IEC 27001 implementation and certification.
What certifications are accepted for this role?
Acceptable certifications include ISO/IEC 27001 Lead Implementer, Lead Auditor, CISA, CGRC, or comparable professional credentials.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.