Security & Compliance Analyst

Benefits

• 401(k)
• 401(k) matching
• Bonus based on performance
• Company parties
• Competitive salary
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

We are hiring a Security & Compliance Analyst to support multiple client environments with a focus on security operations, compliance readiness, and risk management. This role is hands‑on and execution‑focused, working closely with client IT leadership and internal teams to ensure security controls are effective, documented, and consistently maintained.

The Security & Compliance Analyst owns day‑to‑day security and compliance activities across clients, helping translate security findings into actionable remediation and keeping environments audit‑ready without unnecessary complexity.

• Lead recurring security posture reviews with client IT teams
• Review SOC findings, open risks, threat trends, and prioritized remediation actions
• Track security posture and risk over time, not just during audits

• Serve as the primary resource for compliance‑related activities across security platforms
• Maintain audit‑ready documentation including policies, procedures, evidence, risk registers, and remediation logs
• Document security system configurations, changes, and control maturity
• Produce artifacts to support annual assessments and client audit requests

• Design, implement, and maintain role‑based access control (RBAC)
• Enforce least‑privilege access standards
• Manage and document access models and reporting visibility for stakeholders

• Configure and maintain automated security and compliance reporting
• Deliver regular reports covering incidents, vulnerabilities, SLAs, and compliance status
• Clearly communicate security findings to both technical and non‑technical audiences

• Review vulnerability scan results and security findings
• Partner with IT teams to prioritize remediation based on risk and business impact
• Track remediation progress and validate closure of findings

• Support Disaster Recovery and Business Continuity planning activities
• Participate in tabletop exercises and incident simulations
• Document outcomes, gaps, and lessons learned

• Provide security and compliance support across multiple client environments
• Assist with security assessments, gap analyses, and remediation planning
• Help standardize security processes, documentation, and reporting across clients
• Serve as an internal subject‑matter expert for security and compliance best practices

• 3–5+ years of experience in IT security, compliance, risk management, or related roles
• Strong understanding of security operations, SOC workflows, and vulnerability management
• Experience supporting audits or compliance frameworks such as SOC 2, NIST, CIS, or ISO

• Experience in a managed services or consulting environment
• Familiarity with MDR, SIEM, vulnerability scanning, and cloud security platforms
• Experience supporting tabletop exercises or incident response planning
• Security certifications such as Security+, CISSP, CISM, or similar

• Security risks are clearly documented, prioritized, and tracked to resolution
• Audits and assessments are predictable and well‑supported
• Security documentation is current, accurate, and usable
• Clients understand their security posture and next steps
• Internal teams rely on you as a trusted security and compliance resource

• Organized, accountable, and comfortable owning outcomes
• Able to manage multiple priorities without losing attention to detail
• Practical, risk‑focused, and business‑aware
• Willing to raise concerns when something is insecure, undocumented, or unclear

Flexible work from home options available.