Information Security Analyst

Job Summary

To support a growing information security program, the full-time contract Information Security Analyst will manage day-to-day security operations and SOC 2 evidence collection while working remotely in a U.S.-based role through December 2026.

Key responsibilities

• Upload and manage security policies within a compliance automation platform
• Gather, organize, and upload evidence for SOC 2 controls and support remediation efforts
• Monitor EDR alerts and perform initial investigations on security incidents

Required qualifications

• Hands-on experience with SOC 2 compliance and evidence collection
• Proficiency with Vanta or a comparable GRC/compliance automation platform
• Working knowledge of CrowdStrike or similar EDR platforms
• Understanding of HIPAA compliance requirements
• Strong organizational skills to manage a large volume of evidence