Drimva

Abnormal Security

Compliance Trust Analyst

$115K–$165K

Remote - USA · Remote · Full-time · Posted Oct 5, 2026

Experience
4–7 years in cyber security, technology risk, GRC, and/or technical compliance; at least 2 years focused on ISO 27001 implementation and maintenance. Must have led one full ISO 27001 certification cycle, including the 2022 revision.
Education
Bachelor's degree or equivalent military experience (nice to have).

About the job

Owns Abnormal’s governance and policy programs, leads cross-functional committees, and supports risk management, audit readiness, and compliance controls.

What you'll do

  • Run governance committees and drive decisions and follow-up actions.
  • Own policy management end to end and manage the company’s Policy Center.
  • Manage risk operations and support compliance readiness, control effectiveness, and remediation.

What they ask for

  • 4–7 years of experience in cyber security, technology risk, GRC, and/or technical compliance, including at least 2 years focused on ISO 27001 implementation and maintenance.
  • Led at least one full ISO 27001 certification cycle, including the 2022 revision.
  • Project management experience delivering concurrent compliance projects and leading cross-functional teams.
  • Experience managing ISO 27001 and ISO 27701-aligned compliance programs, working with external auditors, and facilitating governance programs.

Nice to have

  • Bachelor’s degree or equivalent military experience; relevant certifications such as ISO Lead Auditor, CRISC, CISSP, CPA, CISA, PMP, or CISM.
  • Experience with NIST frameworks, AI governance frameworks, technology/SaaS/cloud or regulated public companies, or 2+ years of Big 4 experience.

Pay

$114,800 — $165,000 USD base salary

Tools

ISO 27001, ISO 27701, ServiceNow, Agile, Waterfall, NIST CSF, NIST SP 800-53 / 171, ISO/IEC 42001

AI focus

Leads AI Governance committee and may work with AI governance frameworks, including ISO/IEC 42001 and NIST AI RMF.

Model-written summary · the original posting is authoritative

First seen Oct 27, 2026 · Last verified Nov 5, 2026 (UTC)