Security Assessments Analyst

Overview This role bridges compliance frameworks and real-world risk. You’ll help ensure security controls meet internal and external expectations (SOC 2, ISO 27001, customer due diligence).

Responsibilities

Support internal and external audits (SOC 2, ISO, GDPR, etc.)

Manage customer security questionnaires (SIG, CAIQ, etc.)

Maintain risk registers, control evidence, and policy libraries

Track policy exceptions and third-party assessments

Qualifications

3+ years in GRC, security audit, or compliance roles

Familiarity with frameworks like SOC 2, ISO 27001, NIST CSF

Detail-oriented and organized; loves checklists and documentation

Experience with GRC tooling (e.g. Vanta, OneTrust)

Ability to translate technical risks to business impact

Experience in Azure devops.

Nice to Haves

Exposure to privacy regulations (GDPR, CCPA)

Certifications like CISA, CCSK, or ISO Lead Auditor

ChatGPT and AI prompting experience

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Market Research

#J-18808-Ljbffr