Bonterra

InformationSecurityComplianceAnalyst

$76–100k United States FULL TIME Remote Friendly
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Mid+ candidates.

The Brief

“Information Security Compliance Analyst at Bonterra. Skills: Compliance, Risk assessment, SOC reporting. Perform annual SOC reporting. Work with Information Security Risk team”

Industry & Context.

Problems you'll solve

Problem solving; Analytical skills

What They're Looking For.

Must Have

3+ years risk and compliance, Project management experience, Understanding of SOC and ISO, Manage multiple priorities, Proficient with technology, Learn software systems, Proactively identifying needs, Implementing solutions

Nice to Have

Information systems security certifications

What You'll Do.

Perform annual SOC reporting

Work with Information Security Risk team

Work with control owners

Complete requests timely

Perform technical risk assessments

Assess third party controls

Maintain supplier register

Develop playbook for high risk events

Assist maintaining security awareness

Assist maintaining role based trainings

Assist maintaining phishing simulations

Conduct user activity audits

How You'll Work.

Team & Collaboration

Information Security Risk team; Control owners; Internal auditors; External auditors

Communication Scope

Verbal communication; Written communication

Process & Methodology

Project management

Full Job Description

**US Salary:** $76,000 - $100,000 # **About Us** Bonterra exists to propel every doer of good to their peak impact. We measure that impact against our vision to increase the giving rate as a percentage of GDP from 2% to 3% by 2033. We know that this goal is lofty, but we are confident that the right technology and expertise will strengthen trust in the sector, allowing the social good industry to accelerate growth and reach peak impact. Bonterra's differentiated, end-to-end solutions collectively support a unique network of over 20,000 customers, including over 16,000 nonprofit organizations and over 50 percent of Fortune 100 companies. Learn more at bonterratech.com. # **About the Role** The Bonterra Information Security Risk and Compliance department is looking to hire a Compliance Specialist to our team. If you enjoy problem solving, are enthusiastic working in a team format and want to thrive in the ever-changing risk & compliance field while learning new concepts and principles as part of your continuing education, look no further! **Job Responsibilities:** * Perform as the primary in the executing our annual Service Organization Controls (SOC) reporting initiatives, which includes several Bonterra products. * Works closely with other members of the Information Security Risk team. * Works closely with control owners across the company and internal and external auditors to ensure requests are completed in a timely manner as part of the overall project management process. * Performs technical risk assessments of third party suppliers' security and privacy controls. * Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities. * Will be responsible the play book for reporting of high risk events that involve compliance, risk and information security. * Assists in maintaining our overall security awareness, role based security trainings and phishing simulation programs across the enterprise. * Assists in cond

Free ATS check

Applying for this Information Security Compliance Analyst role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Workday

  • Workday has a multi-step form — save your progress after every section.
  • "Apply With LinkedIn" can fail or lose data; manual entry is more reliable.
  • Watch for the "Submit for Review" final step — hitting "Save" alone does not submit.
  • Job requisition numbers are useful when following up with HR by email.

ANONYMOUS · UNFILTERED

What do employees actually say about Bonterra?

Real rants from real employees. Read before you apply.

Read Company Rants →