Quality & Compliance Analyst

The Quality & Compliance team at Domino is building the assurance layer that lets the world's most regulated organizations put Domino at the center of their AI work. Running a genuinely multi-framework program under one roof: SOC 2, ISO 9001, ISO 27001, and CMMC. Small, senior, and deliberately non-bureaucratic. The team sits directly in the revenue path. At an inflection point: moving from standing programs up to running them well and at scale.

Responsibilities

Building the assurance layer that lets the world's most regulated organizations put Domino at the center of their AI work; Take over inbound security and quality questionnaires, learn the answer library and response tooling, and start returning routine questionnaires independently; Pick up the master audit and compliance activities schedule and begin giving the team real lead time on what's coming; Own day-to-day QMS operations, new-hire team and training assignments, training content, and records for change orders, suppliers, and computer systems; Ensure GRC program status is visible in Jira and Confluence without anyone assembling it by hand; Be a trusted reviewer of control statements across SOC 2, ISO 9001, ISO 27001, and CMMC; Keep SOPs and policies current and readable; Make questionnaire turnaround measurably faster

Requirements

2–5 years in GRC, compliance operations, quality assurance, or audit support, in a role where you did the hands-on work yourself; Direct experience responding to security or quality questionnaires at volume, and comfort owning the shared tooling and answer library behind those responses; Hands-on involvement in at least one audit or certification cycle end to end, SOC 2, ISO 9001, ISO 27001, CMMC, or a comparable framework, including evidence collection and findings follow-up; Experience as the day-to-day administrator or power user of a compliance system of record (eQMS, GRC platform, or equivalent), with real accountability for data accuracy; Strong technical writing and editing. You can turn a vague requirement into a clear, correct SOP, and a hard customer question into a precise answer; Fluency in Jira and Confluence, and the discipline to keep them current without being reminded; Real fluency with agentic AI tooling and frameworks, you've built custom skills, agents, or prompt-driven workflows to take repetitive work off your own plate, and you know where model output has to be human-verified; Meticulous attention to detail and calendar discipline. Other people's deadlines depend on your tracking, and you treat that as a commitment; Sound judgment about the limits of your own knowledge, you know when to answer, when to pull in an SME, and when to escalate. You never invent an answer to a customer-facing security question; A collaborative, low-ego approach to working across Security, Engineering, Legal, People, and Sales

Nice to have

Experience in a regulated life-sciences, medical device, or pharmaceutical environment; GxP; 21 CFR Part 11; computer system validation; supplier qualification