Information Security Compliance Analyst

Job Summary

A company is looking for an Information Security Risk & Compliance Analyst - Remote USA.

Key Responsibilities

• Assist with internal and external audits, including evidence collection and remediation tracking
• Draft, update, and maintain security and compliance policies aligned with regulatory requirements
• Conduct vendor risk assessments and support contract security reviews

Required Qualifications

• 2 years in GRC, IT compliance, security, or risk management
• Working knowledge of frameworks such as NIST CSF, ISO27001, and PCI DSS
• Familiarity with IT and cloud environments, security controls, and compliance tooling
• Hands-on experience conducting risk assessments and supporting audits
• Bachelor's degree or equivalent work experience preferred