Analyst, Information Security Compliance
About The Position
Vestwell's Corporate Information Technology team is seeking an experienced, meticulous, and detail-oriented Information Security Compliance Analyst to monitor compliance systems in a rapidly scaling organization. The role reviews SOC controls against current practices, develops automation to confirm compliance, responds to RFPs, and builds a knowledge library to improve the RFP response program. The analyst works cross-functionally with Security, Engineering, Legal, Compliance, IT, and business leaders to identify and correct compliance-system flaws, advise on policies and best practices, and support cybersecurity risk and compliance programs. The role manages cybersecurity risks and compliance obligations, coordinates audits and assessments, tracks remediation, and supports cybersecurity risk management for customers, vendors, suppliers, and subcontractors. The position is based in Vestwell's New York City or Austin office as part of its hybrid in-office operation.
Requirements
- Experience with SOC, ISO, and other audits.
- Experience responding to RFPs.
- Experience working across teams to implement new compliance processes.
- Vendor management and review experience.
- Sound working knowledge of compliance, including audits and RFPs.
- Strong attention to detail and analytical skills.
- Good communication, interpersonal, and leadership skills.
Nice To Haves
- Familiarity with CrowdStrike.
- Familiarity with Vanta.
- Familiarity with Responsive.
- Experience leading an audit response.
Responsibilities
- Monitor compliance systems and review SOC controls against current actions and practices.
- Develop automations to confirm compliance.
- Respond to RFPs and build a knowledge library to speed up the RFP response program.
- Manage cybersecurity risk processes in Vestwell's GRC solution, including risk registers, findings, vulnerabilities, remediation plans, ownership, escalation, and business acceptance.
- Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements, including NIST, ISO, SOC 1 and SOC 2, and other applicable cybersecurity standards and frameworks.
- Coordinate cybersecurity audits, assessments, evidence requests, customer reviews, and remediation tracking in partnership with Legal, Compliance, IT, and business leaders.
- Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires, contract reviews, security expectations, and customer-facing services.
- Work cross-functionally with Security and Engineering to identify and correct flaws in compliance systems, and with Legal and Compliance on best practices and policies.
Benefits
- Comprehensive health benefits.
- Generous time off.
- Employee Wellbeing Committee.
- Hybrid work model with access to collaborative offices.
- Competitive 401(k) plan.
- Eligibility to participate in the Company Bonus Pool.
- Eligibility to receive new hire equity in the Company.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
