Hi, We’re AppFolio
We’re innovators, changemakers, and collaborators. We’re more than just a software company – we’re pioneers in cloud and AI who deliver magical experiences that make our customers’ lives easier. We’re revolutionizing how people do business in the real estate industry, and we want your ideas, enthusiasm, and passion to help us keep innovating.
We are seeking a detail-oriented and highly motivated Technology Compliance Analyst to join our Information Security team. The Technology Compliance Analyst will play a critical role in ensuring our company's Technology & Security operations comply with regulatory requirements and internal policies. This position involves monitoring, assessing, and evaluating systems and processes to ensure adherence to applicable laws, regulations, and standards.
Want more jobs like this?
Get jobs in San Diego, CA delivered to your inbox every week.
AppFolio’s award winning web-based software is used by thousands of happy customers across the country and we are experiencing rapid growth. Each of our Legal, Compliance and Information Security Team Members, works diligently to proactively protect AppFolio from risk, both regulatory and technology in order to enable other teams to operate without friction. They earn great pay, receive exceptional training, and have continued mentoring for career growth.
Ideal candidates are relentless in their commitment to increasing automation and decreasing friction for the rest of the business. They also have a proven track record of being self-motivated with consistent goal achievement, as well as the ability to build extraordinary relationships with internal stakeholders, system owners, and auditors. They bring a risk aware mindset, are eager to learn, detail oriented, well spoken, and can articulate their thoughts clearly in writing.
Your impact
- Conduct regular reviews and audits of internal systems and processes to ensure compliance with internal policies, regulatory requirements, and industry standards (e.g., CPRA, PCI-DSS 4.0, SOC 1, SOC 2, Experian TPS, SOX, NACHA).
- Support the development, implementation, and maintenance of IT, Security and similar policies and procedures.
- Play an important part in the establishment and maturing of a cohesive compliance program that includes all relevant compliance standards.
- Design and implement procedures to monitor and report on compliance status and any non-compliance issues, providing recommendations for corrective actions.
- Work to make compliance monitoring continuous instead of point-in-time to aid in the detection and mitigation of potential compliance issues.
- Maintain and enhance compliance monitoring tools to automate audits, reporting and tracking of compliance.
- Collaborate with IT, Engineering, HR, Legal, Risk and other departments to ensure that compliance requirements are understood and standards are met.
- Assist in the development and delivery of security and compliance training programs.
- Perform gap analysis on existing systems and policies to identify areas of non-compliance or inefficiency, and work cross-functionally to close these gaps.
- Maintain up-to-date knowledge of relevant laws, regulations, and industry standards.
- Participate in threat models, risk assessments, privacy impact assessments, and support the responsible teams through the implementation of risk mitigation strategies.
- Work with external auditors during compliance audits.
- Help test our Incident Response and Business Continuity Plans, and aid in Incident Response efforts for compliance breaches, security incidents, or business continuity events.
- Use a risk-based approach in all aspects of the job.
- Support the Technology Compliance Manager in various projects and initiatives to enhance the AppFolio’s technology compliance program.
Qualifications
- 2+ years of experience in IT compliance, audit, or a related role.
- Strong knowledge of regulatory requirements and industry standards (e.g., CPRA, PCI-DSS 4.0, SOC 1, SOC 2, NIST 800-53, Experian TPS, ISO 27001).
- Excellent analytical and problem-solving skills.
- Strong attention to detail and organization.
- Effective communication and interpersonal skills.
- Ability to work independently and as part of a team.
- Familiarity with risk management concepts and processes.
- Relevant certifications (e.g., CISA, CISSP, CRISC) are a plus.
- Basic scripting skills are a plus.
Compensation & Benefits
The base salary/hourly wage that we reasonably expect to pay for this role is: $77,600 - $97,000
The actual base salary/hourly wage for this role will be determined by a variety of factors, including but not limited to: the candidate’s skills, education, experience, etc.
Please note that base pay is one important aspect of a compelling Total Rewards package. The base pay range indicated here does not include any additional benefits or bonuses/commissions that you may be eligible for based on your role and/or employment type.
Regular full-time employees are eligible for benefits - see here.