Senior IT Compliance Analyst - Remote

Overview

Our mission at Oura is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and sleep quality by using their Oura Ring and its connected app. We've helped 2.5 million people understand and improve their health by providing daily insights and practical steps to inspire healthy lifestyles.

Empowering the world starts with living our values and empowering our team. As a quickly growing company focused on helping people live healthier and happier lives, we ensure that our team members have what they need to do their best work — both in and out of the office.

We are looking for a highly motivated Senior IT Compliance Analyst to join our IT Operations team. This role is critical for supporting and maturing our compliance programs, including SOC2, HIPAA, HITRUST, NIST 800-171, and DoD frameworks.

As a Senior IT Compliance Analyst, you will take ownership of compliance assessments, audit readiness, and control implementations, ensuring that IT systems and processes adhere to regulatory requirements and industry best practices. You will collaborate with cross-functional teams, including Security, GRC, Engineering, and IT Operations, to proactively identify risks, implement controls, and drive a culture of compliance. The ideal candidate has a deep understanding of IT compliance frameworks, experience leading audits and risk assessments, and a proactive approach to enhancing compliance programs through automation and process improvements.

In Short

• Lead Compliance Programs: Take ownership of IT compliance initiatives, driving continuous improvement and maturity across SOC2, HIPAA, HITRUST, and NIST 800-171.
• Audit & Compliance Management: Lead the planning, execution, and management of compliance audits, coordinating with internal teams and external auditors to ensure successful outcomes.
• Policy Development & Maintenance: Develop, maintain, and revise IT compliance policies and procedures, ensuring alignment with industry best practices and evolving regulatory requirements.
• Risk Assessment: In collaboration with Security, conduct regular IT risk assessments, identifying gaps in controls, and recommending mitigation actions to minimize potential risks.
• Documentation & Reporting: Maintain comprehensive documentation to support compliance activities and generate regular reports to communicate compliance status to stakeholders.
• Collaboration & Stakeholder Engagement: Work closely with Security, IT Operations, and Legal teams to facilitate compliance-related initiatives and ensure controls are properly implemented.
• Training & Awareness: Provide ongoing training to internal teams on compliance obligations, policies, and best practices to cultivate a culture of compliance.

Requirements

• Deep understanding of IT compliance frameworks.
• Experience leading audits and risk assessments.
• Proactive approach to enhancing compliance programs.

Benefits

• Opportunity to work in a rapidly growing company.
• Supportive team environment.
• Flexible work arrangements.