Compliance Analyst

The Role

As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes. You will additionally be a co-owner of our holistic internal risk management and internal control structures.

Core Responsibilities

• Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes.
• Have an interest and general aptitude for emerging technologies: from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, to agentic integration within workflows.
• Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to internal and external stakeholders and auditors.
• Maturation of internal documentation and externally facing reporting of Palantir’s security posture across an array of control domains through technical writing.
• Partner with thought leaders across the organization to identify and consult on key controls for risk mitigation and externally focused requirements.

What We Require

• 2+ years of experience protecting or auditing modern and technologically complex SaaS environments.
• Experience facilitating or being the subject of a major compliance framework (SOC 2, ISO 27001, etc.).
• Experience with parsing key controls in structurally complex technical and business processes.

What We Value

• Self-reliance, proactivity, organization, and mission-oriented ambition.
• Inherent comfort with and embracement of continuous change and new challenges.
• Familiarity with basic architecture concepts of distributed cloud infrastructure.
• Demonstrated communication skills to translate engineering language into compliance language and vice versa.
• Demonstrated ability to autonomously project manage and keep oneself on track with long-tail objectives.