Posted 16 months ago

Compliance Analyst

New YorkHybridFull-time

AI Summary

Develops and maintains compliance with security frameworks such as SOC 2 and ISO 27001 for Palantir's products and infrastructure, assists with internal and external security assessments, and supports risk management and control structures.

About this role

A World-Changing Company

Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.

The Role

As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently while also maintaining our current compliance obligations. You will additionally be a co-owner of our holistic internal risk management and internal control structures.

We are looking for a team-focused and mission-oriented compliance professional that can navigate ambiguity and uncertainty, with the ability and desire to achieve goals and drive progress in an environment where outcomes must be achieved through their own resourcefulness and initiative.

Core Responsibilities

Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes.

Have a interest and general aptitude emerging technologies : from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, and a general aptitude for agentic integration within workflows.

Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to various audiences, including internal and external stakeholders and auditors.

Technical writing skills to enable the maturation of internal documentation and externally facing reporting of Palantir’s security posture across an array of control domains.

Partner with thought leaders across the organization to identify and consult on key controls for risk mitigation and externally focused requirements.

What We Value

Self-reliance, proactivity, organization, mission-oriented ambition. We will teach everything that is teachable but you will need to bring the right intangibles and attributes.

Inherent comfort and embracement of continuous change and new challenges.

Familiarity with basic architecture concepts of distributed cloud infrastructure

Demonstrated communication skills to translate engineering language into compliance language and vice versa.

Demonstrated ability to autonomously project manage and keep oneself on track with long-tail objectives.

What We Require

2+ years of experience protecting or auditing modern and technologically complex SaaS environments.

Experience facilitating or being the subject a major compliance framework (SOC 2, ISO 27001, etc.)

Experience with parsing key controls in structurally complex technical and business processes.

Skills

AI ToolingCloud InfrastructureCompliance FrameworksENSEvidence AutomationInternal ControlsIRAPISMAPISO 27001ISO 9001Risk ManagementSecurity AssessmentsSOC 2Technical DocumentationTISAX