Accela Senior Compliance Analyst at Accela leading the implementation and maintenance of ISO/IEC 27001:2022 program. Responsible for managing ISMS, coordinating audits, and driving compliance activities across departments.
Responsibilities
Accela is seeking an experienced Senior Compliance Analyst to lead the implementation, certification, and ongoing maintenance of our ISO/IEC 27001:2022 program. Reporting to the GRC Manager, this role will serve as the primary subject matter expert for ISO 27001, driving the development and continuous improvement of our Information Security Management System (ISMS).
The Senior Compliance Analyst will work closely with Information Security, IT, Engineering, Legal, HR, and other business stakeholders to implement controls, manage compliance activities, coordinate certification audits, and maintain audit readiness. The ideal candidate brings hands-on ISO 27001 implementation experience, strong project management capabilities, and the ability to independently drive cross-functional initiatives while supporting Accela's broader governance, risk, and compliance (GRC) objectives.
ISO 27001 Implementation & Certification
Lead the end-to-end implementation and certification of Accela's ISO/IEC 27001:2022 program.
Develop and manage implementation plans, milestones, deliverables, and stakeholder responsibilities.
Conduct gap assessments, identify compliance requirements, and coordinate remediation activities.
Establish and maintain the ISMS scope, objectives, and Statement of Applicability (SoA).
Coordinate external certification audits, including preparation, evidence collection, stakeholder interviews, and remediation of findings.
Maintain certification readiness and coordinate ongoing surveillance and recertification audits.
Monitor progress, risks, and dependencies, providing regular updates to the GRC Manager.
ISMS Risk Management & Controls
Conduct and maintain information security risk assessments, risk registers, and risk treatment plans.
Qualification
5+ years of experience in governanceStrong knowledge of ISO/IEC 27001Strong project managementWorking knowledge of SOC 2 Type IIFor nearly 20 yearsOUR COMMITMENT TO DIVERSITY
Required
5+ years of experience in governance, risk and compliance (GRC), information security compliance, security assurance, or a related field.
Demonstrated experience leading or substantially owning an ISO/IEC 27001 implementation and certification effort.
Strong knowledge of ISO/IEC 27001:2022 requirements, ISMS operations, risk assessment, risk treatment, control implementation, and audit processes.
Experience preparing for and coordinating external certification audits, including evidence management and remediation of findings.
Experience developing and maintaining compliance policies, procedures, risk assessments, and control documentation.
Hands-on experience with a GRC or compliance automation platform, such as Drata or a comparable solution.
Strong project management, analytical, and organizational skills, with the ability to independently manage complex initiatives and competing priorities.
Excellent communication and stakeholder management skills, including the ability to translate technical requirements into actionable business processes.
Ability to influence and drive accountability across cross-functional teams without direct reporting authority.
ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CGRC, or comparable professional certification.
Working knowledge of SOC 2 Type II, GovRAMP, NIST SP 800-53, CIS Controls, or PCI DSS.
Preferred
Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent practical experience.
Experience supporting GRC programs within a SaaS, cloud technology, or enterprise software environment.
Familiarity with AWS or comparable cloud environments and associated security controls.
Experience leveraging compliance automation platforms and integrating requirements across multiple compliance frameworks.
For nearly 20 years, Accela has been an industry leader in designing and delivering government software to improve efficiency, increase citizen engagement and enable the development of thriving communities. Today, citizens are savvy to how services should be delivered, and expect a consistently convenient, openly transparent view into their local government. While government agencies struggle to do more with less, our mission has never been more critical. Accela provides a robust, cloud-based platform of government software solutions that accelerate growth, efficiency, and transparency in communities of all sizes. From planning, to building, to service request management and more, Accela’s SaaS offerings level the playing field for small and medium governments and enable smaller agencies to leverage larger city technologies. Our open and flexible technology helps agencies address specific needs today, while ensuring they are well prepared for the emerging challenges of the future.
OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION
Accela believes in developing and nurturing a workplace community where our differences are celebrated, and everyone feels a sense of psychological safety and belonging. Accela is committed to putting resources and attention towards evolving our practices, policies, and philosophies to enable diversity to thrive and to support equity in opportunity for everyone.
