Detail-oriented and experienced, the full-time remote Information Security Analyst, GRC will support customer security reviews, manage third-party vendor risk, and improve risk assessment methodologies while collaborating with various internal teams. Key responsibilities Complete technical security questionnaires and risk assessments for customers and prospects Assess and manage third-party and vendor security risks, including reviews of SaaS providers Contribute to compliance initiatives aligned with frameworks such as SOC 2 and ISO 27001 Required qualifications 7+ years of experience in risk, compliance, or security assurance roles Hands-on experience with technical security questionnaires and risk assessments Familiarity with security compliance frameworks (e.g., SOC 2, ISO 27001, NIST) Experience conducting vendor and third-party risk assessments Strong written communication skills for explaining complex security concepts
Information Security Analyst, GRC in workfromhome at Unknown Company
This position is listed as full time and able to be worked remotely.