What are the responsibilities and job description for the Compliance Analyst position at Copado?
About Copado
Copado is the leading DevOps platform for Salesforce, revolutionizing how the world's largest organizations achieve success in their Salesforce deployments. Our mission is to accelerate the Salesforce development lifecycle, support digital transformation, and deliver unparalleled value to our customers. We continuously innovate, ensuring our platform meets the evolving needs of Salesforce developers and operations professionals.
Job Summary
The Compliance Analyst is responsible for contributing to the company’s information security compliance program, with a strong focus on industry and regulatory control frameworks. This role works to ensure that security controls are appropriately designed, implemented, documented, and operating effectively across the organization.
Key Responsibilities
Copado offers a comprehensive benefits package, which includes:
Copado is the leading DevOps platform for Salesforce, revolutionizing how the world's largest organizations achieve success in their Salesforce deployments. Our mission is to accelerate the Salesforce development lifecycle, support digital transformation, and deliver unparalleled value to our customers. We continuously innovate, ensuring our platform meets the evolving needs of Salesforce developers and operations professionals.
Job Summary
The Compliance Analyst is responsible for contributing to the company’s information security compliance program, with a strong focus on industry and regulatory control frameworks. This role works to ensure that security controls are appropriately designed, implemented, documented, and operating effectively across the organization.
Key Responsibilities
- Contribute to the maintenance and implementation of the company’s information security compliance program across multiple frameworks, including:
- ISO 27001
- SOC 2
- FedRAMP
- StateRAMP
- ISO 42001
- Assist with external audits, assessments, and certifications, reviewing and submitting evidence, and interacting with external auditors
- Partner closely with Security, IT, Engineering, Legal, and Business stakeholders to ensure controls are implemented and operating as intended
- Maintain and continuously improve compliance documentation, including:
- Policies and standards
- Control narratives
- Procedures and process documentation
- Audit evidence and artifacts
- Track control maturity, remediation efforts, and ongoing compliance activities to drive continuous improvement
- Support the Manager of Cybersecurity in sales and customer-facing activities, including:
- Responding to security questionnaires and RFPs
- Supporting customer due diligence and assessments
- Presenting the company’s security compliance posture to prospects and clients
- 1-2 years working on a Governance or Compliance team
- Familiar with SOC 2, ISO 27001, or similar frameworks
- Comfortable reading and interpreting policy and audit-style documentation
- Strong written and verbal communication skills, with the ability to translate compliance concepts for both technical and non-technical audiences
- Detail-oriented, organized, and diligent
- Ability to learn quickly and work in a fast-paced, dynamic environment
Copado offers a comprehensive benefits package, which includes:
- Competitive salary and performance-based bonuses.
- Comprehensive health, dental, and vision insurance.
- 401(k) Plan
- Paid Time Off
- Wellness Perks