Information Security Analyst

PlayerZero • Atlanta, GA

2d • $150,000 - $180,000

About The Position

The Information Security Analyst owns the day-to-day execution of PlayerZero’s security administration and compliance operations. The role maintains security controls, investigates gaps, coordinates remediation, and keeps audit programs organized and progressing. Audit readiness is a central responsibility, including administration of Vanta and coordination with internal control owners and external assessors in preparation for SOC 2 audits, HIPAA-related assessments, and ISO 42001 audits. The analyst will also help build readiness for FedRAMP.

This is a hands-on role combining security operations, analysis, and audit coordination. Leadership sets security strategy and priorities; the analyst translates those into consistent execution, surfaces risks, and follows issues through resolution. The role works closely with Engineering, SRE, and business teams, with internal IT responsibilities focused on security-related access and configuration.

Success means security controls operate consistently, access reviews and corrective actions stay on schedule, audit evidence is accurate and current, and auditors and internal owners have a clear process for working together. Findings should reach resolution, leadership should have useful visibility into risk, and FedRAMP readiness should progress through documented requirements, clear ownership, and completed actions.

Requirements

• Experience in security analysis, security administration, or security compliance operations within a software or cloud-based environment.
• Hands-on experience administering identity and access controls, endpoint security, or related security tooling.
• Experience preparing for audits or assessments, coordinating evidence across teams, and tracking findings through remediation.
• Understanding of how to evaluate whether a control is operating effectively and identify gaps between documented policy and actual practice.
• Familiarity with SOC 2 and experience working with control frameworks or regulatory requirements such as HIPAA, ISO standards, or NIST.
• Ability to investigate security findings, distinguish urgency from impact, and work with technical owners on practical corrective actions.
• Clear writing and strong organization, with the ability to maintain accurate documentation and manage multiple deadlines.
• Ownership and follow-through, including the ability to execute independently, escalate decisions appropriately, and keep cross-functional work moving.

Nice To Haves

• Experience supporting FedRAMP readiness, assessments, or ongoing monitoring, including familiarity with NIST SP 800-53.
• Experience administering Vanta or a comparable compliance platform.
• Familiarity with AWS security controls and cloud environments.
• Exposure to ISO 42001 or AI governance programs.
• Scripting or automation experience that improves security operations or evidence collection.

Responsibilities

• Maintain security configurations across identity, endpoint, and business systems, including MFA, access policies, and device compliance; investigate exceptions and address gaps within scope.
• Coordinate access reviews, evaluate permissions against least-privilege expectations, and verify that onboarding, role changes, and offboarding meet security requirements.
• Maintain the audit calendar, organize evidence, coordinate auditor requests, prepare internal owners for assessments, and check submissions for accuracy and completeness.
• Administer Vanta, maintain control mappings, policies, procedures, and evidence, and keep records aligned with company operations.
• Review security alerts, vulnerability findings, and control exceptions; investigate impact, prioritize with technical owners, and track corrective actions through validation and closure.
• Help map FedRAMP requirements to existing controls, identify gaps, maintain security documentation, and coordinate remediation with Engineering, SRE, and external specialists.
• Prepare customer security questionnaire responses, coordinate third-party risk reviews, and assist with incident investigation, documentation, and follow-up.
• Build repeatable workflows, automate evidence collection and routine checks, and make outstanding risks and requirements visible to leadership.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed