Senior Compliance Analyst

HUN02-01-Budapest-Vaci Greens C, Hungary

GE HealthCare

GE HealthCare provides digital infrastructure, data analytics & decision support tools helps in diagnosis, treatment and monitoring of patients

View all jobs at GE HealthCare

Apply now Apply later

Job Description SummarySTO Privacy, Risk and Compliance Team is seeking a highly skilled and experienced Senior Compliance Analyst to lead and manage regulatory and security compliance initiatives within our organization. The ideal candidate will have deep expertise in international security and privacy frameworks, including ISO 27001, ISO 27701, ISO 27017, ISO 27018, and GDPR. This role requires a strong technical background, with the ability to translate compliance requirements into actionable tasks for engineering teams. Project management skills and cloud expertise will be advantageous.

Job Description

Regulatory Compliance & Risk Management:

  • Ensure compliance with security and privacy regulations and frameworks such as HIPAA, ISO 27001, ISO 27701, ISO 27017, ISO 27018, GDPR, and other relevant standards.

  • Develop, implement, and maintain compliance policies, procedures, and controls partnering with product, Security, Privacy and Legal Teams.

  • Conduct risk assessments, audits, and gap analyses to ensure compliance with industry standards and regulatory requirements.

  • Liaise with internal and external auditors and regulatory bodies to support certifications and assessments.

  • Monitor emerging regulatory changes and assess their impact on the organization.

Technical Compliance & Engineering Collaboration:

  • Work closely with engineering, security, and privacy teams to integrate compliance requirements into system architectures and processes.

  • Translate compliance controls into technical requirements for cloud and infrastructure teams.

  • Support DevSecOps initiatives to ensure security and compliance in CI/CD pipelines.

  • Provide guidance on data protection strategies, encryption, access controls, and security best practices to GEHC Product Teams.

Project & Stakeholder Management:

  • Lead cross-functional compliance projects, ensuring alignment with business objectives and technical feasibility.

  • Work with engineering teams to develop automated compliance monitoring solutions.

  • Collaborate with legal, security, privacy, and Product teams to drive a unified compliance strategy.

  • Communicate compliance objectives and updates to senior leadership and key stakeholders.

Cloud & Security Expertise:

  • Support compliance efforts in cloud environments (AWS) and assess security risks related to cloud adoption.

  • Assist in security incident response and remediation efforts related to compliance.

Required Qualifications & Experience:

  • Bachelor’s or Master’s degree in information security, Computer Science, Law, or a related field.

  • 5+ years of experience in compliance, security risk management, or a related field.

  • Strong knowledge of ISO 27001, ISO 27701, ISO 27017, ISO 27018, GDPR, NIST 800-53 and other security/privacy regulations.

  • Technical understanding of cloud security, encryption, IAM, DevSecOps, and network security.

  • Experience translating compliance controls into technical and operational requirements.

  • Strong project management skills, with experience leading compliance initiatives.

  • Excellent stakeholder communication and collaboration skills.

  • Experience working in a cloud-based environment (AWS, Azure, or GCP) is an advantage.

  • Relevant certifications such as CISSP, CISM, CIPP/E, ISO 27001 Lead Auditor/Implementer are advantage

  • Fluent English

About Us

GE HealthCare is a leading global medical technology and digital solutions innovator. Our mission is to improve lives in the moments that matter. Unlock your ambition, turn ideas into world-changing realities, and join an organization where every voice makes a difference, and every difference builds a healthier world.

Inclusion & Diversity statement

GE Healthcare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

Our total rewards are designed to unlock your ambition by giving you the boost and flexibility you need to turn your ideas into world-changing realities. Our salary and benefits are everything you’d expect from an organization with global strength and scale, and you’ll be surrounded by career opportunities in a culture that fosters care, collaboration and support.

#LI-ED1

Additional Information

Relocation Assistance Provided: No

Apply now Apply later

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  0  0  0

Tags: Audits AWS Azure CI/CD CIPP CISM CISSP Cloud Compliance Computer Science DevSecOps Encryption GCP GDPR HIPAA IAM Incident response ISO 27001 Monitoring Network security NIST NIST 800-53 Privacy Risk assessment Risk management Strategy

Region: Europe
Country: Hungary

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.