Compliance Analyst, Forma
Contract
A modern-day benefits platform
Be an early applicant
A modern-day benefits platform
201-500 employees
Be an early applicant
201-500 employees
Company mission
To give every employee the ability to integrate work and life seamlessly.
Role
Who you are
- 5-8 years in security compliance, GRC, data privacy, or legal/compliance roles at a SaaS or fintech company
- Hands-on experience with SOC 2, ISO 27001 HIPAA, PCI DSS, GDPR, and CCPA frameworks
- Familiarity with tools like Vanta, Drata, OneTrust, TrustArc, or equivalent
- Demonstrated success in completing RFPs, security questionnaires, and supporting enterprise client audits
- Strong written communication skills with the ability to tailor complex security responses to a non-technical audience
- Attention to detail, organization, and ability to manage multiple concurrent priorities
- Bachelor's degree in Information Security, Legal Studies, Business, or a related field
- Certifications such as CIPP/US, CIPM, CISSP, CISA, or ISO 27001 Lead Implementer are highly desirable
What the job involves
- We’re looking for a Compliance Analyst to help maintain, scale, and operationalize Forma’s compliance programs across SOC 2, HIPAA, PCI DSS, and privacy frameworks such as GDPR and CCPA
- A key part of this role includes supporting the sales process by completing customer RFPs and security questionnaires to demonstrate our strong security and privacy posture
- You’ll collaborate with cross-functional teams including InfoSec, Legal, Sales, and Product to build trust with customers and ensure our platform meets the highest standards of security, compliance, and transparency
- This role is a 4 month temporary position and will report to the Director of Security and IT
- Own and manage ongoing compliance efforts across SOC 2,ISO 27001, HIPAA, PCI DSS, GDPR, and CCPA
- Maintain and update security and privacy policies, documentation, and evidence to support audits and regulatory requirements
- Lead coordination and responses for third-party audits, risk assessments, and compliance reviews
- Support security incident response planning, tracking of corrective actions, and remediation activities
- Partner with Legal and Product to assess regulatory impacts of new features, vendors, and jurisdictions
- Collaborate with Sales and Customer Success teams to respond to security RFPs, due diligence questionnaires, and client assessments, helping communicate Forma’s compliance capabilities
- Own and update a knowledge base of standardized security responses and documentation for efficient RFP and questionnaire handling
- Conduct vendor security and privacy assessments, ensuring appropriate controls and agreements (e.g., SOC reports, BAAs) are in place
- Educate internal stakeholders through training and documentation on security and data protection best practices
- Stay current on evolving security standards, privacy laws, and industry trends to keep Forma audit-ready and proactive
Our take
Forma is looking to reimagine the employee benefits model. The company helps HR departments select the right benefits, and by leveraging its vendor network, also offer these at a more affordable cost. Forma then also helps employees make smarter, more transparent decisions regarding their health and wellness work benefits.
With generations X and Z dominating the workforce, benefits expectations are rapidly changing. Add to that the upheaval of employee expectations precipitated by the switch to hybrid workforces, and many HR departments have struggled to keep pace with the rate of change. Unused benefits, and enquiries from under-informed employees, eat up both time and resources that undermine the efficiency and credibility of a businesses’ benefits program. Therefore, Forma's solution to this should be appealing for employers and employees alike.
Testament to the efficacy of its model, Forma was only founded in 2017 as Twic, and already boasts the likes of Zoom, Stripe, and DataDog among its customers. With the nature of modern workforces still in flux, Forma look well-placed to be catering to an adaptive, demanding new benefits landscape.
Steph
Company Specialist at Welcome to the Jungle
Insights
-4% employee growth in 12 months
Company
Funding (1 round)
Mar 2022
$40m
SERIES B
Total funding: $40m
Company benefits
- Remote Friendly
- Health Care
- Flexible PTO
- Parental Leave
- Lifestyle Stipend
- Team Building Stipend
- Productivity Stipend
- Career Opportunities
Company HQ
Civic Center, San Francisco, CA
Share this job
View 4 more jobs at Forma