Senior Compliance and Risk Analyst

About the Position

Ready to make a serious impact? Millions of people already rely on Calendly, and we’re still in the midst of exciting product growth - it’s a fantastic time to join us. Everything you’ll work on here will accelerate your career to the next level. If you want to learn, grow, and do the best work of your life alongside the best people you’ve ever worked with, then we hope you’ll consider allowing Calendly to be a part of your professional journey.

Responsibilities

As a Senior Compliance and Risk Analyst, you will:

• Own and manage the organization's compliance program, including SOC 2 and ISO 27001 readiness, certification, and ongoing maintenance.
• Develop and execute a compliance roadmap aligned with business objectives, regulatory requirements, and organizational risk appetite.
• Lead internal and external audits by coordinating evidence collection, managing auditor relationships, and driving timely remediation of findings.
• Monitor changes in regulatory and industry frameworks, assessing their impact on the organization's compliance program.
• Own the enterprise risk management process, including risk identification, assessment, treatment planning, and ongoing monitoring.
• Conduct periodic risk assessments and partner with stakeholders to identify control gaps and prioritize remediation activities.
• Develop and present compliance metrics, risk dashboards, and executive reports for senior leadership.
• Design, document, and improve internal controls aligned with SOC 2, ISO 27001, and other applicable frameworks.
• Lead control testing, including evidence collection, effectiveness validation, remediation tracking, and continuous improvement.
• Expand and mature the organization's common controls framework to support evolving compliance requirements.
• Administer and optimize compliance automation platforms, improving workflow efficiency and reducing manual effort.
• Perform User Access Reviews (UARs) and support continuous compliance monitoring through automation and reporting.
• Partner with Engineering, Security, Product, Legal, HR, and Operations to integrate compliance into business processes and product development.
• Develop training, playbooks, and self-service resources that empower teams to meet compliance requirements efficiently.
• Manage multiple compliance initiatives simultaneously while ensuring projects remain on schedule and stakeholders stay informed.

Requirements

• 5+ years of experience in compliance, risk management, audit, or Governance, Risk, and Compliance (GRC) roles within a technology or SaaS environment.
• Experience owning or leading compliance programs supporting frameworks such as SOC 2 and ISO 27001.
• Working knowledge of security and privacy frameworks including NIST, ISO 27001, GDPR, and HIPAA.
• Experience administering compliance automation platforms such as Drata, Vanta, Tugboat Logic, or similar solutions.
• Experience performing User Access Reviews (UARs) using GRC or compliance automation platforms.
• Strong understanding of internal controls, risk assessment methodologies, and audit processes.
• Demonstrated ability to manage multiple initiatives and deliver results in a fast-paced environment.
• Excellent project management, analytical, and problem-solving skills.
• Strong communication skills with the ability to translate technical and regulatory requirements into practical business solutions.
• Proven ability to collaborate effectively with technical and non-technical stakeholders across the organization.

Nice to Have

• Experience leveraging AI to improve compliance processes or automate workflows.
• Experience scaling compliance programs within a high-growth SaaS organization.
• Hands-on experience developing or expanding a common controls framework.
• Advanced expertise configuring compliance automation platforms, including integrations, custom controls, and reporting.
• Familiarity with additional compliance frameworks such as PCI DSS, FedRAMP, or other industry standards.
• Experience developing compliance training, awareness programs, or self-service enablement resources.
• Professional certifications such as CISA, CRISC, CISSP, CCSK, or equivalent.

We Offer

• Competitive Salary: $165,198 - $233,221 USD annually, based on experience and location.
• Bonus Program: Eligible for our Top Performer Bonus program (or Sales incentive).
• Equity Awards: Opportunity for equity awards.
• Comprehensive Benefits: Competitive benefits package.
• Remote Work: Fully remote position.

About the Company

Calendly is a leading scheduling automation platform that simplifies the process of booking meetings and appointments. Our mission is to save people time so they can focus on what matters most. Join our team and be part of a company that is driving innovation and growth in the tech industry.

Note: If you are an individual with a disability and would like to request a reasonable accommodation as part of the application or recruiting process, please let your Recruiter know when first connecting with them. Calendly is registered as an employer in many, but not all, states. If you are located in Alaska, Delaware, Hawaii, Idaho, Iowa, Montana, Nebraska, North Dakota, Rhode Island, South Dakota, and West Virginia, you will not be eligible for employment. Note that all individual roles will specify location eligibility.