Security Analyst II
Core
Protect corporate assets, web applications, and employees by executing Security Assurance operations, third-party risk assessments, and GRC compliance.
Role type
Security Analyst (GRC & Risk)
Builds
Security posture and compliance evidence for internal operations and external customer trust
Domain
SaaS / Cloud Security / Governance, Risk, and Compliance
Deliverable
dashboards & analysis
Required skills
third-party risk management, GRC operations, security framework knowledge (NIST, ISO, SOC 2), vendor security questionnaire response, compliance audit support, security awareness training design, regulatory compliance tracking, metrics collection, cross-functional collaboration
Preferred skills
modern SaaS environment experience, cloud application familiarity, risk management principles, cloud environment knowledge (AWS, GCP, Azure), security certifications (CRISC, CISSP, CISA, SSCP, CC, Security+, CySA+)
Technologies
NIST 800-53, ISO 27001, SOC 2, AWS, GCP, Azure
Responsibilities
Conduct third-party vendor risk assessments and internal risk evaluations; respond to vendor security questionnaires; assist in tracking evidence for SOC 2 and ISO 27001 audits; identify emerging threats and collaborate on security solutions; deliver security awareness training; assure compliance to outside regulations; collect and maintain security metrics; partner with Legal, Engineering, IT, Finance, and HR; identify operational inefficiencies in security controls.
Seniority
Mid-level, hands-on IC
