Working remotely in a full-time capacity, the Staff Security Analyst II will manage IT and security control assessments, ensure compliance with regulatory standards, and oversee audit activities while collaborating with cross-functional teams. Key responsibilities Lead internal IT and security control assessments aligned with best practice standards and frameworks Manage internal and external audit activities, including planning, coordination, and evidence collection Communicate compliance posture regularly to stakeholders and drive remediation activities for identified control deficiencies Required qualifications 7 years of experience in information security compliance or IT audit roles Strong understanding of IT and security control frameworks such as ISO 27001 and SOC1/SOC2 Experience with end-to-end IT and security control testing and remediation tracking Familiarity with cloud security practices and the shared responsibility model Excellent stakeholder management and analytical skills