Risk & Compliance Analyst

About the role

As a Risk & Compliance Analyst you will work across Vista Group’s global business to identify, assess and mitigate operational risks, with a strong focus on technology, cyber and information security. You will lead the end‑to‑end implementation of SOC2 controls, tools and processes to achieve certification.

Key responsibilities

• Plan and lead the implementation of SOC2 certification across the organisation.
• Facilitate risk and control assessments and develop mitigation strategies.
• Maintain the risk register, controls inventory and business continuity plans.
• Develop and monitor key performance and risk metrics.
• Provide agile risk support for regulatory, project and improvement initiatives.
• Develop policies, procedures and technical documentation to ensure compliance.
• Assist in creating a risk and compliance training programme.
• Perform control assurance activities, monitor compliance, investigate incidents and prepare trend analysis for senior management.

Required profile

• Strong knowledge of security frameworks such as SOC2 and NIST.
• Good understanding of ISO27001 and PCI DSS standards.
• Extensive experience conducting technology risk and control assessments or audits.
• Experience writing policy and procedure documentation.
• Project and change management experience, preferably in software technology.
• Excellent communication and stakeholder management skills.
• Analytical thinking and problem‑solving abilities.
• Bachelor’s degree in information technology or relevant certification (desirable).

Required skills

• SOC2
• NIST
• ISO27001
• PCI DSS
• Technology risk assessment
• Policy documentation
• Project management
• Change management

What we offer

• Opportunities for continuous learning and professional development.
• A fun, agile and collaborative environment within a world‑leading cinema software company.
• Global exposure across offices in Auckland, Sydney, Los Angeles, London, Amsterdam, Cape Town, Shanghai, Mexico City and Kuala Lumpur.