Senior Security and Compliance Analyst

About Proofpoint

Proofpoint is a leading global cybersecurity company focused on protecting the connections among people, data, and AI agents across email, cloud, and collaboration platforms. Trusted by more than 80 Fortune 100 firms, 10,000 major enterprises, and millions of smaller organizations, Proofpoint aims to prevent threats, stop data loss, and enhance resilience in digital environments. Our mission is to safeguard the digital realm and enable secure, confident work practices worldwide.

Work Culture and Values

At Proofpoint, we embody the BRAVE core principles: Bold innovation, Responsiveness to feedback and challenges, Accountability for outstanding results, Visionary problem-solving, and Exceptional execution and impact.

Role Overview

As a Sr. Security and Compliance Analyst, you will play a key role in strengthening Proofpoint’s security compliance programs. You will ensure that our products meet stringent standards such as ISO 27001, ISO42001, TISAX, and SOC 2 Type II certifications. Reporting to the Senior Manager Governance and Compliance, you will collaborate widely across Product Management, Engineering, Legal, and various business units to manage audits, drive security assurance, and enhance organizational risk management.

Key Responsibilities

• Lead and manage compliance projects focused on ISO 27001, ISO42001, TISAX, and SOC 2 Type II ensuring alignment with corporate security and risk strategies.
• Coordinate internal readiness reviews and oversee third-party audit processes adhering to security frameworks and industry standards.
• Create, update, and enforce governance policies, security controls, and procedures to support regulatory compliance and mitigate risks.
• Perform risk assessments and gap analyses, collaborate with teams to develop and implement remediation strategies.
• Serve as primary liaison among engineering, security, legal, product teams, and auditors to maintain clear communication and align compliance objectives.
• Monitor and adapt to emerging security regulations and best practices to foster ongoing improvement of compliance and security posture.
• Develop and facilitate security governance training initiatives to build risk awareness and uphold a compliance-focused culture among stakeholders.

Candidate Profile

• Experienced professional in governance, risk, and compliance (GRC), ideally within SaaS or cloud security settings.
• In-depth understanding of ISO 27001, ISO42001, TISAX, SOC 2 Type II, NIST, GDPR, and related frameworks.
• Track record of successfully managing security audits from inception through to certification.
• Familiarity with implementing comprehensive security policies, controls, and risk management systems in complex enterprise environments.
• Strong project management capabilities with a proven ability to lead cross-departmental projects.
• Excellent communication skills to translate compliance requirements into operational business practices.
• Professional certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer are highly valued.

Why Join Proofpoint?

• Attractive competitive salary package
• Inclusive benefits program
• Opportunities for career growth tailored to your goals
• Flexible working arrangements
• Paid wellness and community outreach days annually
• Ongoing recognition for contributions
• Global collaboration and networking environment

Culture and Inclusion

Proofpoint fosters a workplace culture founded on inclusivity, empowerment, and performance excellence every day. Applications are encouraged from candidates of diverse backgrounds and perspectives. Accommodation is provided for applicants needing assistance during hiring processes.