Information Security Compliance Analyst

Job Summary

Working remotely in a full-time capacity, the Information Security Compliance Analyst will manage annual Service Organization Controls (SOC) reporting initiatives, collaborate with internal and external auditors, and conduct risk assessments of third-party suppliers' security and privacy controls.

Key responsibilities

• Execute annual SOC reporting initiatives for various products and maintain a register of relevant suppliers and risks
• Collaborate with control owners and auditors to ensure timely completion of compliance requests
• Assist in maintaining security awareness and conducting user activity audits across the enterprise

Required qualifications

• 3+ years of experience in risk and compliance activities
• Project management experience
• Strong understanding of SOC and ISO standards
• Proven ability to manage multiple priorities independently
• Information systems security professional certifications preferred (e.g., CRISC, CISA, CISSP)