Information Security Analyst II

📋 Description

• Own and execute full audit lifecycle from scoping to final report.
• Translate complex regulatory standards into concrete requirements for teams.
• Build automation with Python/Go to speed evidence collection and testing.
• Design automated evidence collection from infrastructure (e.g., AWS) and pipelines.
• Liaise between internal teams and auditors to manage expectations.
• Promote security culture with docs and self-service tooling.

🎯 Requirements

• 2-5 years in risk, security, compliance or auditing with hands-on control experience.
• Background auditing or managing security compliance for SaaS tech (AWS, GCP, Azure, Salesforce, Workday).
• Thorough understanding of FedRAMP, PCI-DSS, SOX, ISO 27001, or SOC.
• Experience assessing control implementation to identify risks and mitigations.
• Experience developing and documenting security/control solutions for compliance.
• Strong writing and communication turning complex controls into language for business and engineering audiences.

🎁 Benefits

• New hire stock equity (RSUs) and ESPP.
• Continuous professional development, product training, and career pathing.
• Intradepartmental mentor and buddy program for in-house networking.
• Inclusive culture with Community Guilds and networking.
• Inclusion Talks and internal panel discussions access.
• Free global mental health benefits for employees and dependents age 6+.