Benefits:- 401(k)
- 401(k) matching
- Bonus based on performance
- Company parties
- Competitive salary
- Dental insurance
- Health insurance
- Paid time off
- Vision insurance
Overview
We are hiring a Security & Compliance Analyst to support multiple client environments with a focus on security operations, compliance readiness, and risk management. This role is hands-on and execution-focused, working closely with client IT leadership and internal teams to ensure security controls are effective, documented, and consistently maintained.
The Security & Compliance Analyst owns day-to-day security and compliance activities across clients, helping translate security findings into actionable remediation and keeping environments audit-ready without unnecessary complexity.
Key Responsibilities
Security Operations & Governance
- Lead recurring security posture reviews with client IT teams
- Review SOC findings, open risks, threat trends, and prioritized remediation actions
- Track security posture and risk over time, not just during audits
Compliance & Documentation
- Serve as the primary resource for compliance-related activities across security platforms
- Maintain audit-ready documentation including policies, procedures, evidence, risk registers, and remediation logs
- Document security system configurations, changes, and control maturity
- Produce artifacts to support annual assessments and client audit requests
Access Control & Identity
- Design, implement, and maintain role-based access control (RBAC)
- Enforce least-privilege access standards
- Manage and document access models and reporting visibility for stakeholders
Reporting & Metrics
- Configure and maintain automated security and compliance reporting
- Deliver regular reports covering incidents, vulnerabilities, SLAs, and compliance status
- Clearly communicate security findings to both technical and non-technical audiences
Vulnerability & Risk Management
- Review vulnerability scan results and security findings
- Partner with IT teams to prioritize remediation based on risk and business impact
- Track remediation progress and validate closure of findings
Disaster Recovery & Business Continuity
- Support Disaster Recovery and Business Continuity planning activities
- Participate in tabletop exercises and incident simulations
- Document outcomes, gaps, and lessons learned
Client & Internal Support
- Provide security and compliance support across multiple client environments
- Assist with security assessments, gap analyses, and remediation planning
- Help standardize security processes, documentation, and reporting across clients
- Serve as an internal subject-matter expert for security and compliance best practices
Required Experience & Skills
- 3–5+ years of experience in IT security, compliance, risk management, or related roles
- Strong understanding of security operations, SOC workflows, and vulnerability management
- Experience supporting audits or compliance frameworks such as SOC 2, NIST, CIS, or ISO
- Proven ability to create and maintain clear, organized, audit-ready documentation
- Experience implementing RBAC and least-privilege access models
- Comfortable working across multiple environments with varying levels of security maturity
- Strong written and verbal communication skills
Preferred (Not Required)
- Experience in a managed services or consulting environment
- Familiarity with MDR, SIEM, vulnerability scanning, and cloud security platforms
- Experience supporting tabletop exercises or incident response planning
- Security certifications such as Security+, CISSP, CISM, or similar
What Success Looks Like
- Security risks are clearly documented, prioritized, and tracked to resolution
- Audits and assessments are predictable and well-supported
- Security documentation is current, accurate, and usable
- Clients understand their security posture and next steps
- Internal teams rely on you as a trusted security and compliance resource
Work Style
- Organized, accountable, and comfortable owning outcomes
- Able to manage multiple priorities without losing attention to detail
- Practical, risk-focused, and business-aware
- Willing to raise concerns when something is insecure, undocumented, or unclear
Flexible work from home options available.