Free skills gap assessment

Compliance Analyst Skills Gap Assessment

About this career

Compliance analysts track the rules a company must follow, turn them into clear policies, check that teams actually work that way, and gather the evidence auditors ask for. They also help train staff and flag risks before they become problems.

It suits people who are organised, read carefully and are comfortable explaining rules to busy colleagues. Backgrounds in law, finance, healthcare or operations all lead here.

First roles are usually compliance associate or compliance analyst. From there people move to senior analyst and compliance manager, or specialise in an area such as privacy, financial crime or healthcare.

Similar job titles

Compliance Analyst
Compliance Associate
Compliance Manager

Free with an account

Sign up for free and complete the Skills Gap Assessment

Your readiness for each Compliance Analyst level, and when it's worth applying
Your gaps, most asked-for first, with what to learn and build for each
A week-by-week plan, saved to your account, with progress on every retake

Free accounts get 3 assessments a month. No credit card.

How to get started

New to Compliance Analyst? Where to start learning and what employers usually look for. Everything here is free.

Recommended starting point

Item	Kind
ISC2 Certified in Cybersecurity (CC): free course and exam ISC2 · closes: Regulations and frameworks, Risk assessment and monitoring	Certification
NIST Cybersecurity Framework 2.0 NIST · closes: Regulations and frameworks, Audit support and controls	Course
First project: write a policy from the SANS templates SANS · closes: Policies and documentation, Training and communication	Project

What employers usually look for first

A guide, not a pass mark. Your Skills Gap Assessment shows how ready you are for each level and what to work on.

ISC2 CC, or studying for a compliance certification such as the CCEP
One policy written and a mock compliance review of it

What the Compliance Analyst assessment covers

You answer yes or no to short statements about what you have actually done. Each statement belongs to one of 8 skill areas, and each area is weighted by how often employers ask for it, so the score reflects what jobs need.

Skill areas

Regulations and frameworks. Foundational regulatory concepts first, then SOC 2 and ISO 27001, privacy laws like GDPR-style DPIAs, PIPEDA and CCPA, and sector rules such as BSA/AML.
Policies and documentation. Drafting and updating policies, turning requirements into processes and templates, proofreading, and keeping audit-ready records.
Audit support and controls. Collecting evidence and answering auditor requests for SOC 2 and similar audits, evaluating controls, QA testing, and managing audits end to end.
Risk assessment and monitoring. Risk assessments most often (especially for managers), plus risk monitoring, third-party risk, and security risk work.
Training and communication. Clear written and verbal communication in almost every posting, plus training coordination, creating educational materials, and delivering compliance training.
Stakeholders and advisory. Building relationships with internal teams, advising delivery, product and engineering teams, and influencing without authority (mostly manager roles).
Programs, projects and organisation. Organisation, prioritising several deadlines, project tracking, process standardisation and automation, and running cross-functional programs.
Tools and credentials. GRC platforms, Jira and Confluence, Microsoft Office, and for managers certifications such as CISSP, CISM and CISA.

About this career

It suits people who are organised, read carefully and are comfortable explaining rules to busy colleagues. Backgrounds in law, finance, healthcare or operations all lead here.

Your readiness for each Compliance Analyst level, and when it's worth applying

Your gaps, most asked-for first, with what to learn and build for each

A week-by-week plan, saved to your account, with progress on every retake

Free accounts get 3 assessments a month. No credit card.

How to get started

New to Compliance Analyst? Where to start learning and what employers usually look for. Everything here is free.

Recommended starting point

Item	Kind
ISC2 Certified in Cybersecurity (CC): free course and exam ISC2 · closes: Regulations and frameworks, Risk assessment and monitoring	Certification
NIST Cybersecurity Framework 2.0 NIST · closes: Regulations and frameworks, Audit support and controls	Course
First project: write a policy from the SANS templates SANS · closes: Policies and documentation, Training and communication	Project

What employers usually look for first

A guide, not a pass mark. Your Skills Gap Assessment shows how ready you are for each level and what to work on.

ISC2 CC, or studying for a compliance certification such as the CCEP

One policy written and a mock compliance review of it

What the Compliance Analyst assessment covers

Skill areas

Regulations and frameworks. Foundational regulatory concepts first, then SOC 2 and ISO 27001, privacy laws like GDPR-style DPIAs, PIPEDA and CCPA, and sector rules such as BSA/AML.

Policies and documentation. Drafting and updating policies, turning requirements into processes and templates, proofreading, and keeping audit-ready records.

Audit support and controls. Collecting evidence and answering auditor requests for SOC 2 and similar audits, evaluating controls, QA testing, and managing audits end to end.

Risk assessment and monitoring. Risk assessments most often (especially for managers), plus risk monitoring, third-party risk, and security risk work.

Training and communication. Clear written and verbal communication in almost every posting, plus training coordination, creating educational materials, and delivering compliance training.

Stakeholders and advisory. Building relationships with internal teams, advising delivery, product and engineering teams, and influencing without authority (mostly manager roles).

Programs, projects and organisation. Organisation, prioritising several deadlines, project tracking, process standardisation and automation, and running cross-functional programs.

Tools and credentials. GRC platforms, Jira and Confluence, Microsoft Office, and for managers certifications such as CISSP, CISM and CISA.