Senior Compliance Analyst
Location: Remote, USA
Employment Type: Full-Time
Benefits Offered: Vision, Medical, Life, Dental, 401K
Gross annual base salary: USD 99,000 – 128,500
Additional variable compensation and benefits may apply. Total compensation is based on experience, skills, and location using objective, job-related criteria.
Summary
We are seeking an experienced Senior Compliance Analyst with a strong background in IT General Controls (ITGCs) and cloud-based service offerings (e.g., SaaS). This role supports the ongoing management and maturity of the compliance program, ensuring alignment with regulatory requirements, industry frameworks, and contractual obligations. The ideal candidate will have experience assessing security controls, supporting customer due diligence and contract reviews, and partnering across teams to address compliance, security, and audit requirements.
Primary Duties and Responsibilities
- Evaluate and assess IT General Controls (ITGCs), security controls, and compliance processes to ensure alignment with regulatory, contractual, and organizational requirements.
- Partner with Security, Cloud Operations, Engineering, Product, Legal, and other stakeholders to ensure compliance requirements are appropriately implemented and maintained within cloud-hosted environments.
- Review customer contract terms related to cybersecurity, privacy, artificial intelligence, audit rights, and regulatory compliance.
- Support negotiations with prospective and existing customers by providing subject matter expertise on security, compliance, cloud infrastructure, and control implementation.
- Complete customer and prospect due diligence questionnaires, security assessments, and requests for compliance-related information.
- Support external audits and certification activities, including SOC 1, SOC 2, ISO 27001, FedRAMP, and other applicable frameworks.
- Perform compliance assessments, risk analyses, and control reviews to identify gaps and recommend remediation activities.
- Develop, maintain, and enhance compliance policies, standards, procedures, and control documentation.
- Monitor changes in regulatory requirements, cybersecurity threats, cloud technologies, and industry best practices to continuously improve the compliance program.
- Serve as a trusted advisor on compliance matters across the organization.
Required Education and Experience
- Bachelor's degree and 5+ years of experience in IT audit, cybersecurity, information security, cloud compliance, risk management, regulatory compliance, or related field.
- Strong knowledge of IT General Controls (ITGCs), cloud security principles, shared responsibility models, and cloud infrastructure architectures.
- Experience supporting compliance programs, audits, and assessments related to frameworks such as SOC 1, SOC 2, ISO 27001, NIST 800-53, FedRAMP, GDPR, or similar standards.
- Excellent written and verbal communication skills, with the ability to translate complex technical and compliance concepts for both technical and non-technical audiences.
Preferred Education and Experience
- Experience with SaaS, cloud-native, or enterprise software environments.
- Experience reviewing and interpreting information security, privacy, artificial intelligence, and compliance requirements within customer contracts and legal agreements.
- Familiarity with Microsoft Azure.
- Relevant certifications such as CISA, CISSP, CISM, CRISC, CCSP, or similar.
Knowledge, Skills, and Abilities
- Self-starter and results driven.
- Ability to multi-task and prioritize.
- Flexible and adaptable.
- Works well independently and as a team.
- Highly professional and approachable demeanor.
- Comfortable communicating with all levels of management.
Who We Are
OneStream is how today’s Finance teams can go beyond just reporting on the past and Take Finance Further™ by steering the business to the future. It’s the only enterprise finance platform that unifies financial and operational data, embeds AI for better decisions and productivity, and empowers the CFO to become a critical driver of business strategy and execution. Our vision is to be the operating system for modern finance, digitizing core financial functions and empowering the CFO to become a critical driver of business strategy. To learn more visit www.onestream.com.
Why Join The OneStream Team
- Transparency around corporate structure, salary, and benefits
- Core value of customer success
- Variety of project work (not industry-specific)
- Strong culture and camaraderie
- Multiple training opportunities
Benefits at OneStream
OneStream employees are passionate, hardworking individuals who go above and beyond to keep our customers happy and follow through on our mission statement. They consistently deliver the best and in turn, we make every effort to keep them cared for and happy. A sample of the benefits we provide are:
- Excellent Medical Plan
- Dental & Vision Insurance
- Life Insurance
- Short & Long Term Disability
- Vacation Time
- Paid Holidays
- Professional Development
- Retirement Plan
All candidates must be legally authorized to work for any company in the country where this position is located without sponsorship.
OneStream is an Equal Opportunity Employer.
#LI-CB1
#LI-Remote
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
Similar Jobs
What you need to know about the Boston Tech Scene
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories

.png)

