Information Security Associate

📋 Description

• Own trust and compliance platform (Vanta) including monitoring and evidence collection.
• Manage SOC 2, ISO 27001, and external penetration tests.
• Coordinate with internal teams and auditors to support audits end-to-end.
• Maintain inventory of subprocessors/vendors, focusing on data access and PII.
• Chair Middesk's security governance committee and own policy lifecycle.
• Translate between technical and non-technical teams and drive remediation.

🎯 Requirements

• Experience owning or contributing to SOC 2 and/or ISO 27001 programs.
• Hands-on with compliance automation tools like Vanta, Drata, or Delve.
• Strong data protection concepts, vendor risk, and security controls.
• Ability to manage multiple stakeholders, deadlines, and ambiguity.
• Clear written and verbal communication with auditors and leadership.
• Familiarity with GDPR/CCPA privacy frameworks.