InfoSec Analyst II, Trust

Job Summary

Focused on enhancing security compliance, the full-time remote InfoSec Analyst II, Trust will manage SOC 2 and ISO 27001 compliance programs, contribute to AI governance, and translate security requirements into effective processes.

Key responsibilities

• Manage SOC 2, ISO 27001, and customer security reviews through evidence collection and control testing
• Contribute to AI governance activities, including vendor assessments and documentation of security controls
• Coordinate end-to-end security assessments, tracking dependencies, findings, and remediation efforts

Required qualifications

• Experience in GRC, compliance, or IT audit within a SaaS, fintech, or technology environment
• Practical knowledge of frameworks such as SOC 2, ISO 27001, or NIST
• Proven ability to test controls and translate technical requirements into actionable tasks
• Strong organizational skills to manage multiple assessments and stakeholders effectively
• Experience supporting AI risk assessments or enterprise AI-use policies