Why This Job is Featured on The SaaS Jobs
Why this Role is Featured on The SaaS Jobs
Compliance roles in SaaS increasingly sit at the intersection of cloud architecture, customer trust, and go to market execution. This Senior Compliance Analyst position stands out for its explicit focus on cloud based service offerings and IT General Controls, alongside support for widely used assurance and regulatory frameworks such as SOC, ISO 27001, and FedRAMP. That mix reflects the reality of modern SaaS operations where security and compliance commitments are part of the product promise.
From a SaaS career perspective, the role offers durable exposure to how a compliance program matures over time, including control design, evidence quality, and audit readiness across multiple standards. The work also touches customer due diligence and contract reviews, which builds practical fluency in the questions enterprise buyers ask and how SaaS providers substantiate shared responsibility models. Experience partnering with Engineering, Product, Cloud Operations, and Legal is broadly transferable across SaaS companies with regulated or security sensitive customers.
The section above is editorial commentary from The SaaS Jobs, provided to help SaaS professionals understand the role in a broader industry context.
Job Description
Senior Compliance Analyst
Location: Remote, USA
Employment Type: Full-Time
Benefits Offered: Vision, Medical, Life, Dental, 401K
Gross annual base salary: USD 99,000 – 128,500
Additional variable compensation and benefits may apply. Total compensation is based on experience, skills, and location using objective, job-related criteria.
Summary
We are seeking an experienced Senior Compliance Analyst with a strong background in IT General Controls (ITGCs) and cloud-based service offerings (e.g., SaaS). This role supports the ongoing management and maturity of the compliance program, ensuring alignment with regulatory requirements, industry frameworks, and contractual obligations. The ideal candidate will have experience assessing security controls, supporting customer due diligence and contract reviews, and partnering across teams to address compliance, security, and audit requirements.
Primary Duties and Responsibilities
- Evaluate and assess IT General Controls (ITGCs), security controls, and compliance processes to ensure alignment with regulatory, contractual, and organizational requirements.
- Partner with Security, Cloud Operations, Engineering, Product, Legal, and other stakeholders to ensure compliance requirements are appropriately implemented and maintained within cloud-hosted environments.
- Review customer contract terms related to cybersecurity, privacy, artificial intelligence, audit rights, and regulatory compliance.
- Support negotiations with prospective and existing customers by providing subject matter expertise on security, compliance, cloud infrastructure, and control implementation.
- Complete customer and prospect due diligence questionnaires, security assessments, and requests for compliance-related information.
- Support external audits and certification activities, including SOC 1, SOC 2, ISO 27001, FedRAMP, and other applicable frameworks.
- Perform compliance assessments, risk analyses, and control reviews to identify gaps and recommend remediation activities.
- Develop, maintain, and enhance compliance policies, standards, procedures, and control documentation.
- Monitor changes in regulatory requirements, cybersecurity threats, cloud technologies, and industry best practices to continuously improve the compliance program.
- Serve as a trusted advisor on compliance matters across the organization.
Required Education and Experience
- Bachelor's degree and 5+ years of experience in IT audit, cybersecurity, information security, cloud compliance, risk management, regulatory compliance, or related field.
- Strong knowledge of IT General Controls (ITGCs), cloud security principles, shared responsibility models, and cloud infrastructure architectures.
- Experience supporting compliance programs, audits, and assessments related to frameworks such as SOC 1, SOC 2, ISO 27001, NIST 800-53, FedRAMP, GDPR, or similar standards.
- Excellent written and verbal communication skills, with the ability to translate complex technical and compliance concepts for both technical and non-technical audiences.
Preferred Education and Experience
- Experience with SaaS, cloud-native, or enterprise software environments.
- Experience reviewing and interpreting information security, privacy, artificial intelligence, and compliance requirements within customer contracts and legal agreements.
- Familiarity with Microsoft Azure.
- Relevant certifications such as CISA, CISSP, CISM, CRISC, CCSP, or similar.
Knowledge, Skills, and Abilities
- Self-starter and results driven.
- Ability to multi-task and prioritize.
- Flexible and adaptable.
- Works well independently and as a team.
- Highly professional and approachable demeanor.
- Comfortable communicating with all levels of management.
Who We Are
OneStream is how today’s Finance teams can go beyond just reporting on the past and Take Finance Further™ by steering the business to the future. It’s the only enterprise finance platform that unifies financial and operational data, embeds AI for better decisions and productivity, and empowers the CFO to become a critical driver of business strategy and execution. Our vision is to be the operating system for modern finance, digitizing core financial functions and empowering the CFO to become a critical driver of business strategy. To learn more visit www.onestream.com.
Why Join The OneStream Team
- Transparency around corporate structure, salary, and benefits
- Core value of customer success
- Variety of project work (not industry-specific)
- Strong culture and camaraderie
- Multiple training opportunities
Benefits at OneStream
OneStream employees are passionate, hardworking individuals who go above and beyond to keep our customers happy and follow through on our mission statement. They consistently deliver the best and in turn, we make every effort to keep them cared for and happy. A sample of the benefits we provide are:
- Excellent Medical Plan
- Dental & Vision Insurance
- Life Insurance
- Short & Long Term Disability
- Vacation Time
- Paid Holidays
- Professional Development
- Retirement Plan
All candidates must be legally authorized to work for any company in the country where this position is located without sponsorship.
OneStream is an Equal Opportunity Employer.
#LI-CB1
#LI-Remote
