Elastic is hiring a Senior Information Security Analyst to lead governance and compliance initiatives across regulatory frameworks and certifications. The role focuses on turning obligations into practical, repeatable processes, partnering with Engineering, Product, Legal, IT, and Security to automate and modernize how compliance is delivered while maintaining a strong security posture. You will balance strategic thinking with hands-on execution, influence Elastic’s approach to compliance as we scale, and potentially lead audits, raise security awareness, and design scalable governance programs. This is a remote-friendly position. Responsibilities include leading and coordinating compliance programs for SOC 2, ISO 2701, PCI DSS, FedRAMP, TISAX, UK Cyber Essentials Plus, Cyber Essentials Plus, and other applicable certifications; planning and executing internal and external audits; developing governance processes to reduce overhead and improve scalability; owning Elastic's security awareness program; translating requirements into practical controls; measuring compliance health with metrics and executive dashboards; identifying opportunities to automate and streamline audit readiness; adopting AI to modernize compliance workflows and improve evidence collection, monitoring, risk analysis, and documentation. Qualifications include experience leading audits and certification programs in cloud-native or SaaS environments (SOC 2, ISO 27001, PCI DSS, FedRAMP, UK Cyber Essentials Plus, and TISAX); experience managing or supporting security awareness programs; strong organizational

Elastic is hiring a Senior Information Security Analyst to lead governance and compliance initiatives across regulatory frameworks and certifications. The role focuses on turning obligations into practical, repeatable processes, partnering with Engineering, Product, Legal, IT, and Security to automate and modernize how compliance is delivered while maintaining a strong security posture. You will balance strategic thinking with hands-on execution, influence Elastic’s approach to compliance as we scale, and potentially lead audits, raise security awareness, and design scalable governance programs. This is a remote-friendly position. Responsibilities include leading and coordinating compliance programs for SOC 2, ISO 2701, PCI DSS, FedRAMP, TISAX, UK Cyber Essentials Plus, Cyber Essentials Plus, and other applicable certifications; planning and executing internal and external audits; developing governance processes to reduce overhead and improve scalability; owning Elastic's security awareness program; translating requirements into practical controls; measuring compliance health with metrics and executive dashboards; identifying opportunities to automate and streamline audit readiness; adopting AI to modernize compliance workflows and improve evidence collection, monitoring, risk analysis, and documentation. Qualifications include experience leading audits and certification programs in cloud-native or SaaS environments (SOC 2, ISO 27001, PCI DSS, FedRAMP, UK Cyber Essentials Plus, and TISAX); experience managing or supporting security awareness programs; strong organizational