Security & Compliance Analyst

📋 Description

• Own Governance, Risk, and Compliance program; SOC 2 audit end-to-end.
• Manage compliance platform (Vanta) as primary admin; monitor controls and automate evidence.
• Respond to customer security questionnaires, RFPs, and due diligence requests.
• Conduct vendor security reviews and maintain the vendor registry.
• Maintain and drive policy, standards, and procedures with approvals.
• Contribute to security operations: logging, alerting, and device posture improvements.

🎯 Requirements

• 3–5 years in a GRC, compliance, or security analyst role at a SaaS/tech company.
• Hands-on admin experience with a compliance automation platform (Vanta, Drata, Secureframe).
• Led or contributed to at least one SOC 2 Type II audit cycle.
• Led or substantially participated in at least one large technical project or deployment.
• Strong written communication.
• Self-directed and organized.

🎁 Benefits

• Pathway to promotion and growth opportunities based on performance.
• Paid company-wide week off at the end of each year.
• Flexible Vacation Policy.
• In-person annual gatherings (Dominican Republic).
• Full medical, dental, and vision benefits for US, UK, and Canada-based employees.
• Full short-term disability and life benefits; available long-term disability.