Information Security Analyst

Job Summary

A company is looking for an Information Security Analyst.

Key Responsibilities

• Administer and maintain GRC platform, collecting and managing SOC 2 Type 2 evidence and supporting various compliance efforts
• Coordinate access reviews across multiple systems and maintain governance policy inventory and risk registers
• Support vendor security reviews, draft RFP responses, and assist with security training and compliance reporting

Required Qualifications

• 2-4+ years of experience in security GRC, IT audit, compliance, or risk management
• Familiarity with SOC 2, ISO 27001, NIST CSF, and vendor security
• Experience using Vanta or a comparable GRC/compliance platform
• Ability to work with technical teams and understand security evidence
• Experience in SaaS environments is a plus