Security Analyst

Location: Remote in US

Type: Contract to hire

Our client is seeking an Information Technology (IT) Security Analyst to ensure IT and knowledge management systems are meeting the needs of its employees.

Responsibilities:

• Maintain all security tools and managing updates.
• Develop new security SOPs and formalizing internal controls.
• Monitor Managed Services Provider (MSP) to implement organization-wide security technology and developing our Security Operations Center (SOC).
• Manage internal + external policy compliance and maintaining controls for external governance (SOC2, ISO27001, GDPR).
• Evaluate and vet new software/technologies and implementing security controls to mitigate risk.
• Manage the Security Incident Response program and developing testing plans.
• Design, maintain, and troubleshoot the SIEM environment.
• Own the Security IT processes, developing standard operating procedures and protocols.
• Coordinate the implementation of IT resources and assets, assessing for data security.
• Supervise and resolve IT security issues, business data, and events, you'll identify gaps in the support process and amend them accordingly.
• Own the SOC to identify problems affecting users, ensuring our projects meet needs.
• Lead efforts to achieve and maintain SOC 2 compliance and certification.
• Guide internal teams in creating and maintaining comprehensive documentation for SOC 2 compliance.
• Ensure all documentation aligns with SOC 2 standards and requirements.

Qualifications:

• Bachelor’s degree in computer science, Information Technology, or a related field.
• Proven experience in information security, risk management, or compliance roles.
• Familiarity with SOC 2 standards and certification processes.
• Strong understanding of security frameworks and best practices.
• Excellent communication and interpersonal skills.
• Detail-oriented with strong organizational skills.
• Ability to work independently and as part of a team.
• Proficiency in Microsoft 365 & Azure and one or more programming/scripting languages

Preferred Qualifications:

• Relevant certifications such as CISSP, CISA, or CISM.
• Experience working in a security operations center (SOC) or similar environment.
• Prior experience with security audits and evidence gathering.

You will join a team...

• From diverse locations and backgrounds;
• Committed to driving programs that advance climate action and sustainable development through high-quality web applications, database solutions, and analytical platforms using the latest and evolving technology stacks