Senior Level Security And Compliance Jobs
Senior level security and compliance jobs place experienced professionals in charge of risk frameworks, audit programs, and the cross-functional teams that keep organizations defensible and inspection-ready. Roles are predominantly on-site and hybrid across Technology & Software, Retail, and E-Commerce & Online Marketplaces, with employers like Amazon, iManage, and Tech Army hiring at this level now.
Find JobsOverview
Showing 3 of 7+ Senior Level Security And Compliance jobs
The Senior Security & Compliance Analyst will provide, but not be limited to, the following activities and tasks.
Minimum Qualifications. The candidate must possess the minimum qualifications and experience of the STC Job Family cited in Section 2 (Security Management, Job #6810, Security Analyst (C. Advanced)), together with the following Department minimum qualifications and experience:- Per the STC Job Family description: a minimum of four (4) years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, and database design and administration, including one to two (1–2) years of experience with information security, and knowledge of security issues, techniques, and implications across all existing computer platforms.
- Minimum of seven (7) years across information security disciplines, with demonstrated experience in both security governance/compliance (GRC) and hands-on security operations.
- Demonstrated experience drafting information security policy and standards and implementing NIST SP 800-53 and/or NIST CSF controls.
- Demonstrated experience performing security risk assessments and supporting internal or external audits.
- On-site availability at the Department's location, 4040 Esplanade Way, Tallahassee, Florida. Remote work may be considered on an occasional, ad-hoc basis with prior written approval of the Contract Manager; this is not a hybrid or permanent remote arrangement. Travel costs will not be reimbursed.
- Education and Certification. The candidate must possess, at a minimum, a Bachelor's degree in computer science, information systems, cybersecurity, or a related field, or equivalent work experience; and at least one current industry certification from the following (others may be considered):
- CISA — Certified Information Systems Auditor (strongly aligned to the GRC/audit core).
- CRISC — Certified in Risk and Information Systems Control.
- CGRC — Certified in Governance, Risk and Compliance (formerly CAP).
- CISM — Certified Information Security Manager.
- CISSP — Certified Information Systems Security Professional.
- Preferred Qualifications. The following are preferred and will strengthen a candidate's evaluation:
- Florida state government or public-sector information security experience.
- Working knowledge of Rule 60GG-2, F.A.C., and Section 282.318, Florida Statutes.
- CJIS Security Policy implementation or audit experience.
- HIPAA Security Rule and PHI-handling experience.
- Hands-on Microsoft 365 G5, Microsoft Defender (Endpoint, Vulnerability Management), and Microsoft Purview experience.
- Vulnerability management tooling and remediation-coordination experience.
- Experience developing IAM / access-control standards and provisioning-integrity controls.
- PowerShell or comparable scripting for security automation and reporting.
The Senior Security & Compliance Analyst will provide, but not be limited to, the following activities and tasks.
Minimum Qualifications. The candidate must possess the minimum qualifications and experience of the STC Job Family cited in Section 2 (Security Management, Job #6810, Security Analyst (C. Advanced)), together with the following Department minimum qualifications and experience:- Per the STC Job Family description: a minimum of four (4) years of combined IT and security work experience with a broad range of exposure to systems analysis, applications development, and database design and administration, including one to two (1–2) years of experience with information security, and knowledge of security issues, techniques, and implications across all existing computer platforms.
- Minimum of seven (7) years across information security disciplines, with demonstrated experience in both security governance/compliance (GRC) and hands-on security operations.
- Demonstrated experience drafting information security policy and standards and implementing NIST SP 800-53 and/or NIST CSF controls.
- Demonstrated experience performing security risk assessments and supporting internal or external audits.
- On-site availability at the Department's location, 4040 Esplanade Way, Tallahassee, Florida. Remote work may be considered on an occasional, ad-hoc basis with prior written approval of the Contract Manager; this is not a hybrid or permanent remote arrangement. Travel costs will not be reimbursed.
- Education and Certification. The candidate must possess, at a minimum, a Bachelor's degree in computer science, information systems, cybersecurity, or a related field, or equivalent work experience; and at least one current industry certification from the following (others may be considered):
- CISA — Certified Information Systems Auditor (strongly aligned to the GRC/audit core).
- CRISC — Certified in Risk and Information Systems Control.
- CGRC — Certified in Governance, Risk and Compliance (formerly CAP).
- CISM — Certified Information Security Manager.
- CISSP — Certified Information Systems Security Professional.
- Preferred Qualifications. The following are preferred and will strengthen a candidate's evaluation:
- Florida state government or public-sector information security experience.
- Working knowledge of Rule 60GG-2, F.A.C., and Section 282.318, Florida Statutes.
- CJIS Security Policy implementation or audit experience.
- HIPAA Security Rule and PHI-handling experience.
- Hands-on Microsoft 365 G5, Microsoft Defender (Endpoint, Vulnerability Management), and Microsoft Purview experience.
- Vulnerability management tooling and remediation-coordination experience.
- Experience developing IAM / access-control standards and provisioning-integrity controls.
- PowerShell or comparable scripting for security automation and reporting.
See All 7 Senior Level Security And Compliance Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Security And Compliance Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Retail
- E-Commerce & Online Marketplaces
- Aerospace & Defense
- Media & Entertainment
Senior Level Security And Compliance Jobs: Frequently Asked Questions
How do I get a senior level security and compliance job?
Employers hiring at this level want candidates who have owned compliance programs end to end, not just contributed to them. Demonstrating that you have led audits, built or revised control frameworks, and advised leadership on regulatory risk will set you apart. Certifications such as CISSP, CISA, or CRISC carry real weight, and a history of cross-functional stakeholder management matters as much as technical depth.
Which companies hire senior level security and compliances?
Companies hiring senior level security and compliances right now include Amazon, iManage, and Tech Army, based on current listings on Migrate Mate as of September 2026. Hiring at this level covers large enterprises with dedicated risk and compliance functions, financial institutions subject to strict regulatory oversight, and technology companies managing data privacy and security obligations at scale.
Are there remote senior level security and compliance jobs?
Yes, though availability varies by employer and role scope. About 67% of senior level security and compliance openings are remote or hybrid as of September 2026, reflecting the fact that much of this work is documentation, advisory, and policy-driven. Roles requiring hands-on infrastructure access or on-site audit presence tend to require in-person attendance more often.
What makes a security and compliance role senior level?
Senior level security and compliance roles are defined by ownership rather than execution. Professionals at this stage are expected to design and maintain compliance programs, interpret regulatory requirements for the business, present findings to executive leadership, and mentor junior team members. The scope is broader, the stakeholders are more senior, and the expectation is that you drive outcomes independently rather than following direction.
Which industries hire the most senior level security and compliances?
Senior Level security and compliance roles concentrate in Technology & Software, Retail, and E-Commerce & Online Marketplaces, based on current listings on Migrate Mate as of September 2026. These sectors carry the heaviest regulatory burdens and face the most rigorous audit cycles, which drives consistent demand for experienced professionals who can manage complex compliance environments and respond to evolving legal and technical requirements.