Senior Information Security Compliance Analyst

Job Description

The Senior Information Security Compliance Analyst is a key member of the SRO Compliance & Portfolio Management team, responsible for ensuring the organization maintains compliance with applicable regulatory, statutory, and contractual requirements, as well as internal security policies and standards.

• Conduct assessments, monitor compliance efforts, manage risk, and provide expert guidance to stakeholders to ensure the organization’s information security posture aligns with industry best practices and frameworks.
• Ensure the organization complies with relevant regulatory requirements (e.g., GDPR, HIPAA, CCPA/CPRA) and industry standards (e.g., ISO 27001, SOC 2, NIST CSF, PCI DSS).
• Develop, implement, and maintain information security policies, standards, and guidelines.
• Track both customer and internal/external stakeholder security inquiries to remediation, including triaging and answering security questionnaires.
• Lead in risk assessments to evaluate potential security threats and vulnerabilities.
• Collaborate with cross-functional teams to remediate compliance gaps and reduce risks.
• Track and manage risk exceptions, ensuring appropriate documentation and approvals.
• Act as the primary liaison for internal and external audits, including regulatory audits, client security assessments, and third-party audits.
• Prepare and provide evidence to demonstrate compliance with applicable standards and requirements.
• Monitor and track the completion of audit findings and corrective actions.
• Proactively stay up to date with changes in regulatory and compliance requirements, as well as industry trends.
• Anticipate, recommend, and implement improvements to the compliance program to address evolving risks and requirements.
• Participate in the development and enhancement of security and compliance tools, processes, and frameworks.

About the Role

The role involves conducting assessments, monitoring compliance efforts, managing risk, and providing expert guidance to stakeholders to ensure the organization’s information security posture aligns with industry best practices and frameworks.

Responsibilities

• Ensure the organization complies with relevant regulatory requirements (e.g., GDPR, HIPAA, CCPA/CPRA) and industry standards (e.g., ISO 27001, SOC 2, NIST CSF, PCI DSS).
• Develop, implement, and maintain information security policies, standards, and guidelines.
• Conduct regular audits and assessments to identify gaps and ensure adherence to compliance frameworks.
• Be extremely detail oriented and meticulous about accuracy and completeness.
• Track both customer and internal/external stakeholder security inquiries to remediation, including triaging and answering security questionnaires.
• Lead in risk assessments to evaluate potential security threats and vulnerabilities.
• Collaborate with cross-functional teams to remediate compliance gaps and reduce risks.
• Track and manage risk exceptions, ensuring appropriate documentation and approvals.
• Act as the primary liaison for internal and external audits, including regulatory audits, client security assessments, and third-party audits.
• Prepare and provide evidence to demonstrate compliance with applicable standards and requirements.
• Monitor and track the completion of audit findings and corrective actions.
• Proactively stay up to date with changes in regulatory and compliance requirements, as well as industry trends.
• Anticipate, recommend, and implement improvements to the compliance program to address evolving risks and requirements.
• Participate in the development and enhancement of security and compliance tools, processes, and frameworks.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field; or equivalent work experience.
• 5+ years of experience in information security, compliance, or related roles.
• Experience working with regulatory requirements and industry frameworks (e.g., GDPR, HIPAA, ISO 27001, NIST, SOC 2, PCI DSS).
• Strong understanding of risk assessment methodologies, control frameworks, and compliance requirements.
• Hands-on experience with compliance management tools and GRC platforms.
• Proficiency in participating in audits and managing remediation plans.
• Familiarity with cloud security and third-party risk management.
• Comfortable using AI tools for compliance efforts.

Qualifications

• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)

Target Base Salary Range

$100,000 - $150,000

Consistent with Motorola Solutions values and applicable law, we provide the following information to promote pay transparency and equity. Pay within this range varies and depends on job-related knowledge, skills, and experience. The actual offer will be based on the individual candidate.

Basic Requirements

• Bachelor's Degree
• 5+ years of experience in information security, compliance, or related roles
• Legal authorization to work in the U.S. indefinitely is required.
• Employer work permit sponsorship is not available for this position.

Travel Requirements

Under 10%

Relocation Provided

No

Position Type

Experienced

Referral Payment Plan

Yes

Our U.S. Benefits Include

• Incentive Bonus Plans
• Medical, Dental, Vision benefits
• 401K with Company Match
• 10 Paid Holidays
• Generous Paid Time Off Packages
• Employee Stock Purchase Plan
• Paid Parental & Family Leave

EEO Statement

Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic. We are proud of our people-first and community-focused culture, empowering every Motorolan to be their most authentic self and to do their best work to deliver on the promise of a safer world.