Sr. Security & Compliance Analyst

The Role

We are seeking an experienced Sr. Security and Compliance Analyst to enhance Proofpoint's security compliance programs, ensuring our product portfolio meets the rigorous standards of ISO 27001, ISO42001, TISAX and SOC 2 Type II certifications. Reporting to the Sr. Manager Governance and Compliance, this role is pivotal ensuring strong execution to maintain compliance across the organization. You will work cross-functionally with Product Management, Engineering, Legal, and a broad set of business stakeholders to drive security assurance, manage audit processes, and strengthen Proofpoint's risk posture.

Responsibilities

• Lead Compliance Initiatives - Drive and oversee the successful certification and continuous compliance with ISO 27001, ISO42001, TISAX & SOC 2 Type II, ensuring alignment with Proofpoint's security and risk management strategies.
• Manage Internal & External Audits - Coordinate and execute internal readiness assessments and manage third-party audits, ensuring adherence to security frameworks and industry best practices.
• Develop Policies & Controls - Establish, refine, and enforce security governance policies, controls, and processes that support regulatory compliance and risk mitigation.
• Risk Management & Remediation - Identify compliance risks, conduct gap analyses, and collaborate with cross-functional teams to implement remediation plans.
• Stakeholder Collaboration - Act as the primary compliance liaison between engineering, security, legal, product management, and external auditors, ensuring clear communication and alignment of objectives.
• Continuous Improvement - Monitor evolving security regulations, industry standards, and best practices, proactively adapting policies and controls to maintain compliance and improve security posture.
• Training & Awareness - Develop and deliver security governance training to relevant stakeholders to promote a culture of compliance and risk awareness.

What You Bring to the Team

• Proven experience in governance, risk, and compliance (GRC), preferably within a SaaS or cloud security environment.
• Deep knowledge of ISO 27001, ISO42001, TISAX SOC 2 Type II, NIST, GDPR, and other security standards and frameworks.
• Demonstrated success in managing security audits from planning to certification.
• Experience implementing security policies, controls, and risk management frameworks in a complex enterprise environment.
• Strong project management skills with the ability to drive cross-functional initiatives.
• Excellent communication skills, with the ability to translate security and compliance requirements into actionable business processes.
• Certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer are highly desirable.

Benefits

• Competitive compensation
• Comprehensive benefits
• Career success on your terms
• Flexible work environment
• Annual wellness and community outreach days
• Always on recognition for your contributions
• Global collaboration and networking opportunities

We encourage applications from individuals of all backgrounds, experiences, and perspectives. If you need accommodation during the application or interview process, please reach out to .