Benefits:

401(k)

401(k) matching

Bonus based on performance

Company parties

Competitive salary

Dental insurance

Health insurance

Paid time off

Vision insurance

Overview

We are hiring a Security & Compliance Analyst to support multiple client environments with a focus on security operations, compliance readiness, and risk management. This role is hands-on and execution-focused, working closely with client IT leadership and internal teams to ensure security controls are effective, documented, and consistently maintained.

The Security & Compliance Analyst owns day-to-day security and compliance activities across clients, helping translate security findings into actionable remediation and keeping environments audit-ready without unnecessary complexity.

Key Responsibilities

Security Operations & Governance

Lead recurring security posture reviews with client IT teams

Review SOC findings, open risks, threat trends, and prioritized remediation actions

Track security posture and risk over time, not just during audits

Compliance & Documentation

Serve as the primary resource for compliance-related activities across security platforms

Maintain audit-ready documentation including policies, procedures, evidence, risk registers, and remediation logs

Document security system configurations, changes, and control maturity

Produce artifacts to support annual assessments and client audit requests

Access Control & Identity

Design, implement, and maintain role-based access control (RBAC)

Enforce least-privilege access standards

Manage and document access models and reporting visibility for stakeholders

Reporting & Metrics

Configure and maintain automated security and compliance reporting

Deliver regular reports covering incidents, vulnerabilities, SLAs, and compliance status

Clearly communicate security findings to both technical and non-technical audiences

Vulnerability & Risk Management

Review vulnerability scan results and security findings

Partner with IT teams to prioritize remediation based on risk and business impact

Track remediation progress and validate closure of findings

Disaster Recovery & Business Continuity

Support Disaster Recovery and Business Continuity planning activities

Participate in tabletop exercises and incident simulations

Document outcomes, gaps, and lessons learned

Client & Internal Support

Provide security and compliance support across multiple client environments

Assist with security assessments, gap analyses, and remediation planning

Help standardize security processes, documentation, and reporting across clients

Serve as an internal subject-matter expert for security and compliance best practices

Required Experience & Skills

3–5+ years of experience in IT security, compliance, risk management, or related roles

Strong understanding of security operations, SOC workflows, and vulnerability management

Experience supporting audits or compliance frameworks such as SOC 2, NIST, CIS, or ISO

Proven ability to create and maintain clear, organized, audit-ready documentation

Experience implementing RBAC and least-privilege access models

Comfortable working across multiple environments with varying levels of security maturity

Strong written and verbal communication skills

Preferred (Not Required)

Experience in a managed services or consulting environment

Familiarity with MDR, SIEM, vulnerability scanning, and cloud security platforms

Experience supporting tabletop exercises or incident response planning

Security certifications such as Security+, CISSP, CISM, or similar

What Success Looks Like

Security risks are clearly documented, prioritized, and tracked to resolution

Audits and assessments are predictable and well-supported

Security documentation is current, accurate, and usable

Clients understand their security posture and next steps

Internal teams rely on you as a trusted security and compliance resource

Work Style

Organized, accountable, and comfortable owning outcomes

Able to manage multiple priorities without losing attention to detail

Practical, risk-focused, and business-aware

Willing to raise concerns when something is insecure, undocumented, or unclear

Flexible work from home options available.