This is a full-time senior-level position, open to all US locations, allowing for remote work from home.
The position requires US citizenship and either a CISSP or Security+ certification.
The role serves as FormAssembly's primary compliance subject matter expert, owning critical security certifications and leading cross-functional teams through complex audit cycles.
The analyst will partner closely with Engineering, IT, Product, Sales, and HR to evaluate controls, escalate risks, and ensure compliance programs support growth with enterprise and government clients.
FormAssembly is a 100% remote, fast-growing SaaS company that helps customers streamline data collection processes.
The company has been recognized in the 2020 Inc. 5000 list of fastest growing private companies for four consecutive years and is a G2 Crowd Winter 2021 Leader.
Requirements:
Candidates must have 5+ years of experience driving security-compliance audits, including FedRAMP, DoD IL2-5, SOC-2, ISO27001, and PCI.
The role requires leading compliance initiatives and serving as the primary liaison with assessors and stakeholders.
Candidates must drive continuous monitoring and control implementation for NIST 800-53 and DoD SRG requirements, acting as the primary contact for government-related initiatives.
The ability to work cohesively alongside different teams such as Engineering, IT, Product, and Marketing is essential.
Experience with similar frameworks such as EU Cyber Resilience Act (CRA), GDPR, CCPA, and CPRA is a bonus.
Candidates should have experience preparing and presenting status reports and metrics on risk and non-compliance.
US Citizenship and an active CISSP or Security+ certification are mandatory.
Benefits:
Health benefits (health, dental, vision) are provided for Team Members based in the United States.
Mental Health benefits are available through SpringHealth.
The company offers a 401(k) plan with a 4% company match.
Employees enjoy unlimited PTO, with a required minimum use of 2 weeks per year for Salaried/Exempt staff, or 4 weeks of paid vacation for hourly/non-exempt employees.
There are 9 paid company holidays each year.
A flexible work schedule is offered, allowing employees to work from anywhere.
Generous paid parental leave of up to 16 weeks is provided.
The company matches charitable contributions.
A budget for professional development is available.