Compliance Analyst, MongoDB

• This position has significant growth potential and we’re looking for someone who is excited to take initiative and eager to learn
• Be a US Person (i.e. U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee)
• Bachelor's degree in a technical field or equivalent professional experience
• Experience conducting major security and compliance audits including ISO27001, HIPAA, PCI, and SOC2
• Hands-on experience assessing, implementing, and documenting security controls in cloud environments
• Strong understanding of cloud security, compliance, risk management, and information security principles
• Exceptional skills in analysis, diagnostics, and critical thinking
• Proven ability to collaborate proactively with internal teams and external customers
• Strong verbal, written, and interpersonal communication skills for both technical and non-technical audiences
• Effective communication of progress, concerns, and escalations to managers and stakeholders in a timely manner
• Demonstrated ability to work independently and take ownership of tasks with minimal supervision
• Resourcefulness in utilizing publicly available and internal resources to complete assignments
• Proficiency in Microsoft Office (Word, Excel, PowerPoint) and Google Workspace (Docs, Sheets, Slides)

Desirable

• The MongoDB Security team is looking for a Public Sector Compliance Analyst
• This role will report to the Public Sector Program Manager and will support our internal Governance, Risk, and Compliance program to help scale MongoDB Inc. to support our customer’s needs
• This role will be responsible for assessing, documenting, and monitoring risk and compliance for MongoDB product offerings
• This role will support MongoDB’s public sector compliance team in several key areas
• This includes communicating compliance requirements to internal stakeholders, gathering system and organizational information, and using that to maintain documentation and complete deliverables
• The role will also provide general administrative support
• This includes preparing data for analyses and reports, arranging meetings, and documenting meeting minutes and action items
• Assist with ongoing public sector compliance maintenance for a leading Database as a Service (DBaaS) compliance team
• These efforts enable the continuous growth of the Governance, Risk, and Compliance Program
• Support assessment activities as required by potential sponsors, 3PAO, or the PMO to maintain compliance certifications
• Monitor internal compliance against information security governance frameworks by participating in third party assessments, internal control reviews, and gap assessments
• Identify and communicate control gaps, evaluate action plans and milestones, and provide ongoing monitoring through remediation
• Develop, review, and maintain policies, processes, and procedures for MongoDB’s Governance, Risk, and Compliance Program
• Develop, review, and maintain customer facing documentation (e.g. CIS, CRM)
• Support continuous monitoring activities to maintain compliance certifications (e.g. annual assessments, significant changes, vulnerability management, and incident reporting)
• Work cross-functionally with organizational stakeholders to provide guidance on the effectiveness of security controls
• Support audit readiness by engaging with internal stakeholders, providing guidance on compliance requirements, and preparing them for assessment interviews
• Assist with building reports, dashboards, and presentations for various audiences (e.g. executive level, business unit level, department level, and customers)
• Communicate recommendations for optimizing business operations to meet internal and external compliance goals
• Leverage ticketing systems to document and track assignments to completion