Senior Compliance Analyst

EnergyHub empowers utilities and their customers to create a clean, distributed energy future. Our customers are real utilities managing the real electrical grid supporting the normal lives of millions of real people. Our mission is to keep the grid running reliably while enabling more renewable energy and reducing reliance on fossil fuel.

We are seeking a Senior IT Compliance Analyst to join our growing team. As a Senior IT Compliance Analyst, you will be responsible for evaluating and supporting compliance initiatives, policies, and documentation to support the company’s organizational objectives. The Senior IT Compliance Analyst mitigates risk to ensure that IT business practices are conducted in accordance with all approved policies, compliance frameworks and procedures.

Main Responsibilities

• Assist with SOX/SOC II/PCI/ISO 27001 evidence collection activities to meet compliance requirements
• Lead cross-functional business and governance projects, including defining, implementing, and analyzing IT processes and procedures that support the company’s business objectives.
• Act as the privacy point person for the company (GDPR, CCPA, CPPA, etc), ensuring policies and procedures are in compliance.
• Participate in compliance audits and assist in preparing documentation for onsite vendor program reviews.
• Experience analyzing and implementing compliance programs and designing and implementing processes/controls.
• Collaborate with other departments across EnergyHub to ensure effective communication, training, and understanding of IT policies and procedures.
• Monitor IT policies to ensure compliance with all aspects of federal, state, and local laws and regulations. Maintain the policy library to ensure it is up to date.
• Suggest mitigation strategies to reduce risk to the environment.
• Research and respond to security questionnaires from potential customers.
• Evaluate waivers/exceptions to policies to ensure they are accurate and still meet their initial intent.

Key Skills and Experience

• BA or BS (or higher-level degree) in business, accounting, finance, computer science, information systems or a related discipline plus a minimum of five years’ experience in a compliance, audit, or related capacity
• Advanced Technical Writing
• Knowledge and understanding of GDPR, SOX, SOC II, ISO 27001, PCI, HIPAA and NIST standards, especially NIST 800-53, 800-18, 800-34, 800-37, 800-60.
• Knowledge of Information Technology and Information Security Concepts.
• Ability to effectively communicate with both technical and non-technical personnel.
• Ability to interpret management, operational and technical implementation methods to determine compliance with existing controls.
• Proven team experience and comfort in a team-oriented environment.
• Passion for working with technology and excitement for creating high quality consumer technology product

• Collaborate with outstanding people: Our employees work hard, do great work, and enjoy collaborating and learning from each other.
• Make an immediate impact: New employees can expect to be given real responsibility for bringing new technologies to the marketplace. You are empowered to perform as soon as you join the team!
• Gain well rounded experience: EnergyHub offers a diverse and dynamic environment where you will get the chance to work directly with executives and develop expertise across multiple areas of the business.
• Work with the latest technologies: You’ll gain exposure to a broad spectrum of IoT, SaaS and machine learning challenges, including distributed fault-tolerance, device control optimization, and process modeling to support scalable interaction with disparate downstream APIs.
• Be part of something important: Help create the future of how energy is produced and consumed. Make a positive impact on our climate.
• Focus on fun: EnergyHub places high value on our team culture. Happy hours and holiday parties are important to us, but what’s also important is how our employees feel every single day.

EnergyHub is a growing enterprise software company that works with the most forward-thinking companies in smart energy. Our platform lets consumers turn their smart thermostats, electric cars, water heaters, and other products into virtual power plants that keep the grid stable and enable higher penetration of solar and wind power. We work on technology that already provides energy and cost savings to millions of people through partnerships with the leading companies in the Internet of Things.

EnergyHub offers a generous benefits package including 100% paid medical for employees and a 401(k) with employer match. We offer a casual environment, the flexibility to set your own schedule, a fully stocked fridge and pantry, free Citi Bike membership, secure bike rack, gym subsidy, paid parental leave, and an education assistance program.

EnergyHub is an Equal Opportunity Employer

In connection with your application, we collect information that identifies, reasonably relates to or describes you (“Personal Information”). The categories of Personal Information that we may collect include your name, government-issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, and demographic information.  We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or future positions, recordkeeping in relation to recruiting and hiring, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies.