Sr. Compliance Analyst

The posting, as Accela wrote it

ABOUT THE ROLE

Accela is seeking an experienced Senior Compliance Analyst to lead the implementation, certification, and ongoing maintenance of our ISO/IEC 27001:2022 program. Reporting to the GRC Manager, this role will serve as the primary subject matter expert for ISO 27001, driving the development and continuous improvement of our Information Security Management System (ISMS).

The Senior Compliance Analyst will work closely with Information Security, IT, Engineering, Legal, HR, and other business stakeholders to implement controls, manage compliance activities, coordinate certification audits, and maintain audit readiness. The ideal candidate brings hands-on ISO 27001 implementation experience, strong project management capabilities, and the ability to independently drive cross-functional initiatives while supporting Accela's broader governance, risk, and compliance (GRC) objectives.

Key Responsibilities

ISO 27001 Implementation & Certification

• Lead the end-to-end implementation and certification of Accela's ISO/IEC 27001:2022 program.
• Develop and manage implementation plans, milestones, deliverables, and stakeholder responsibilities.
• Conduct gap assessments, identify compliance requirements, and coordinate remediation activities.
• Establish and maintain the ISMS scope, objectives, and Statement of Applicability (SoA).
• Coordinate external certification audits, including preparation, evidence collection, stakeholder interviews, and remediation of findings.
• Maintain certification readiness and coordinate ongoing surveillance and recertification audits.
• Monitor progress, risks, and dependencies, providing regular updates to the GRC Manager.

ISMS Risk Management & Controls

• Conduct and maintain information security risk assessments, risk registers, and risk treatment plans.
• Partner with control owners to implement, assess, document, and monitor applicable ISO 27001 controls.
• Evaluate control effectiveness, identify gaps, and track remediation through completion.
• Coordinate internal audits, management reviews, corrective actions, and continual improvement activities.
• Monitor organizational and regulatory changes that may affect ISMS requirements and compliance obligations.

Policies, Documentation & Compliance Operations

• Develop and maintain information security policies, procedures, standards, and supporting ISMS documentation.
• Establish processes for documentation management, control assessments, evidence collection, and ongoing compliance monitoring.
• Ensure required documentation and records are accurate, current, appropriately approved, and audit-ready.
• Integrate ISO 27001 requirements into existing business processes while leveraging established controls and documentation.

GRC Platform & Evidence Management

• Maintain ISO 27001 requirements, controls, risks, evidence, and remediation activities within Accela's GRC platform, including Drata.
• Map existing controls and evidence to IS

[…]
S offerings level the playing field for small and medium governments and enable smaller agencies to leverage larger city technologies. Our open and flexible technology helps agencies address specific needs today, while ensuring they are well prepared for the emerging challenges of the future.

OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION
Accela believes in developing and nurturing a workplace community where our differences are celebrated, and everyone feels a sense of psychological safety and belonging. Accela is committed to putting resources and attention towards evolving our practices, policies, and philosophies to enable diversity to thrive and to support equity in opportunity for everyone.

COMPENSATION AND WELL-BEING
The annual base salary range for this full-time position is $120,000-$140,000 (less applicable taxes). The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience. In addition to an annual base salary, this position is eligible for an annual bonus target. This is a discretionary bonus awarded based on company and individual goal achievement.

Accela’s U.S. team members will receive a generous benefits package consisting of options including flexible time off, comprehensive medical, dental, and vision plans, family planning benefits, 401(k) retirement savings plan with company match, health savings account with company contributions, flexible spending account, life, accident, and disability coverage, business travel insurance, employee assistance programs, and other well-being benefits.

Accela is an Equal Opportunity Employer/Affirmative Action Employer and will respond to requests for job accommodations.

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or based on disability, gender identity, and sexual orientation

#LI-Remote