Soc analyst jobs in Bayonne, New JerseyCreate job alerts

This Jobot Consulting Job is hosted by: Amanda Preston Are you a fit? Easy Apply now by clicking the "Quick Apply" button and sending us your resume. Salary: $70 - $80 per hour A bit about us: We are a large, diversified organization with a complex technology environment and a strong focus on responsible innovation. As AI adoption continues to expand across the business, our Governance, Risk & Compliance team plays a critical role in helping teams evaluate, document, and manage AI use cases in a practical, thoughtful, and compliant way. This is a highly visible opportunity to support enterprise-wide AI governance efforts in a federated environment. The team partners closely with Legal, Privacy, Security, Procurement, Technology, and business stakeholders to ensure AI is adopted responsibly while still enabling innovation and operational progress. Why join us? This role offers the opportunity to make an immediate impact on a growing AI governance program. You will help shape and improve the way AI use cases are reviewed, documented, approved, and monitored across a large enterprise environment. The right person will have the chance to work on meaningful AI risk and compliance initiatives, partner with senior stakeholders across multiple functions, and contribute to responsible AI practices at scale. This is an ideal opportunity for someone who enjoys building practical governance processes, improving workflows, and translating complex AI risk concepts into clear business guidance. Job Details The Governance, Risk & Compliance organization is seeking an experienced AI Risk & Compliance Analyst to support the intake, assessment, documentation, and ongoing governance of AI use cases across the enterprise. This role is intended for a hands-on practitioner with direct experience in AI governance, AI risk assessment, responsible AI controls, regulatory alignment, and cross-functional review processes. The contractor will be expected to make an immediate impact by improving AI use case intake, strengthening risk review workflows, maintaining clear documentation, and helping align AI activities with evolving legal, regulatory, privacy, security, and compliance expectations. Because the organization operates in a federated environment, this role requires strong stakeholder management, practical judgment, and the ability to help teams adopt AI responsibly without creating unnecessary friction. What You’ll Do Operate and improve the AI use case intake process, including triage, risk categorization, stakeholder routing, approval tracking, and follow-up. Conduct AI risk and compliance reviews for proposed and existing AI use cases, including evaluation of data use, privacy, security, third-party risk, regulatory exposure, business impact, and control requirements. Review AI-enabled tools, platforms, vendors, and processes for risks related to confidential data, sensitive data, automated decision-making, transparency, human oversight, intellectual property, bias, accuracy, and regulatory obligations. Maintain and improve the AI use case inventory, including owners, vendors, data types, risk ratings, approval status, required controls, exceptions, and review cadence. Translate AI regulatory, privacy, security, and compliance expectations into practical intake questions, risk assessment criteria, control requirements, and decision records. Support alignment with AI governance standards, regulatory expectations, and sector-specific guidance. Partner with Legal, Privacy, Security, Procurement, Technology, and business teams to document approvals, mitigations, exceptions, remediation actions, and ongoing monitoring requirements. Support third-party AI risk reviews, including evaluation of vendor AI capabilities, data processing practices, contractual considerations, and governance commitments. Develop and improve AI governance artifacts, including intake forms, review checklists, risk rating criteria, process documentation, decision templates, and reporting metrics. Support reporting on AI governance activity, including intake volume, review cycle time, risk themes, open issues, remediation status, exceptions, and regulatory alignment. Required Experience 5+ years of experience in governance, risk, compliance, privacy, information security, technology risk, third-party risk, model risk, audit, or a related field. 2+ years of direct, hands-on experience with AI governance, responsible AI, AI risk assessment, AI compliance, model risk management, machine learning governance, or emerging technology risk. Experience reviewing AI use cases involving generative AI tools, SaaS platforms, machine learning models, automated workflows, analytics, or vendor-provided AI capabilities. Experience evaluating AI risks such as data leakage, confidential data exposure, privacy impact, intellectual property concerns, hallucination or accuracy risk, bias, automated decision-making, transparency, vendor dependency, and human oversight. Working knowledge of AI governance frameworks, standards, or regulatory guidance such as NIST AI RMF, ISO/IEC 42001, EU AI Act concepts, OECD AI principles, privacy regulations, or sector-specific AI guidance. Strong understanding of GRC fundamentals, including risk assessment, control evaluation, issue tracking, remediation management, policy exceptions, audit-ready documentation, and stakeholder approvals. Familiarity with security and compliance frameworks such as NIST CSF, NIST 800-53, ISO 27001, COBIT, SOC 2, PCI, HIPAA, or SOX. Experience creating or improving intake forms, risk assessment templates, control mappings, decision records, process documentation, or governance workflows. Ability to work independently, manage multiple concurrent reviews, and produce high-quality documentation with limited supervision. Strong written and verbal communication skills, including the ability to explain AI risk and compliance concepts to non-specialist stakeholders. Preferred Experience Experience standing up or improving an AI governance intake and review process. Experience maintaining an AI system, AI use case, model, or automated decisioning inventory. Experience supporting AI governance in a federated, matrixed, or multi-business enterprise. Experience with third-party AI risk management, GRC platforms, workflow tools, risk registers, Jira, SharePoint, OneTrust, MetricStream, Archer, or similar tools. Experience developing AI governance metrics, dashboards, executive reporting, or operational KPIs. Relevant certifications such as AIGP, CISA, CRISC, CISM, CISSP, CDPSE, ISO 27001, ISO 42001, or similar credentials. Interested in hearing more? Easy Apply now by clicking the "Quick Apply" button. Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions. Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance. Information collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Jobot, and/or its agents and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here: jobot.com/privacy-policy

Full-time Description Binary Defense is seeking a talented Data Scientist / Software Engineer to join our team in a dual-discipline role bridging applied data science and production software engineering. This is not a research-only or notebook-only position — you will own the full lifecycle of data-driven capabilities, from hypothesis to deployed service running in our production environment supporting MDR operations and the NightBeacon product suite. Responsibilities • Design, build, and ship production-grade data and ML systems that operate against large-scale cybersecurity telemetry, including endpoint, network, identity, and cloud-derived signals., • Apply analytical, statistical, and machine learning techniques to collect, analyze, and interpret large cybersecurity data sets, and translate findings into deployable software., • Develop, test, and maintain backend services, APIs, and data pipelines that integrate ML models and analytics into Binary Defense products and SOC tooling., • Collaborate closely with software engineering, product, detection engineering, and security engineering teams to embed algorithms and analytics directly into our platforms., • Own code quality across the stack — write clean, well-tested, reviewed code; participate in design reviews; and contribute to architectural decisions affecting data and ML systems., • Operationalize models with appropriate monitoring, versioning, retraining, and rollback strategies (MLOps)., • Contribute to product, services, and detection engineering roadmap by identifying where data science and engineering investment will measurably improve outcomes for analysts and clients., • Develop data-driven solutions that ship — not prototypes that stall. Requirements Data Science • Master's or PhD in Computer Science, Machine Learning, Data Science, Statistics, or equivalent experience., • At least 3 years of experience as a data scientist, ML engineer, or applied research engineer, ideally supporting cybersecurity applications., • Working knowledge of linear algebra, statistics, probability, and the mathematics underlying modern ML., • Strong understanding of statistical modeling supervised and unsupervised learning, and the tradeoffs between classical ML and deep learning approaches., • Hands-on experience with ML frameworks such as TensorFlow, PyTorch, or scikit-learn., • Experience with big data technologies (Spark, Hadoop ecosystem, or modern equivalents) and NoSQL data stores., • Experience with data visualization and analyst-facing tooling (Tableau, Power BI, D3.js, or similar). Software Engineering • At least 3 years of experience writing production software, with code shipped to real users in a team setting., • Strong proficiency in Python, plus working competence in at least one additional production language (Go, Rust, C#/.NET, Java, or TypeScript)., • Solid foundations in software design: data structures, algorithms, OOP and functional patterns, API design, and system design for performance and scale., • Experience designing and building REST or gRPC APIs and the services behind them., • Strong with relational and NoSQL database design, query optimization, and schema evolution., • Proficient with Git, modern code review workflows, and writing unit and integration tests., • Comfortable with CI/CD pipelines and shipping behind feature flags or staged rollouts., • Experience with containerization (Docker) and at least one orchestration or deployment platform (Kubernetes, ECS, or equivalent)., • Familiarity with cloud platforms — AWS, Azure, or GCP — including their managed data, compute, and ML services., • Excellent written and verbal communication; able to defend technical decisions and write documentation that engineers and analysts will use. Preferred • Direct experience applying data science to security problems: detection engineering, threat intelligence enrichment, behavioral analytics, malware classification, alert triage, or adversary attribution., • Experience with managed ML services such as Amazon SageMaker, Vertex AI, or Azure ML., • Familiarity with LLM-based systems, including retrieval-augmented generation, agentic workflows, evaluation frameworks, and prompt and model lifecycle management., • Experience operating in an Agile or continuous-delivery environment., • Knowledge of data privacy and security regulations such as GDPR, CCPA, or HIPAA, and experience handling sensitive customer data accordingly., • Familiarity with DevOps and SRE practices, including infrastructure-as-code (Terraform), observability (metrics, logs, traces), and incident response., • Background or prior role in threat intelligence, security research, security engineering, or SOC analysis., • Strong work ethic, intellectual honesty, and creative problem-solving — comfortable working through ambiguity and shipping under real deadlines. About Binary Defense Binary Defense is a leading Managed Detection and Response (MDR) provider, trusted by hundreds of organizations to protect what matters most. Our team of SOC analysts, threat hunters, detection engineers, and threat researchers work around the clock to deliver proactive, risk-focused security outcomes. We bring the attacker's mindset to defense, helping clients detect threats earlier, respond faster, and continuously improve their security posture. For more information, visit our, check out our, or follow us on. Binary Defense offers competitive medical, dental and vision coverage for employees and dependents, a 401k match which vests every payroll, a flexible and remote friendly work environment, as well as training opportunities to expand your skill set (to name a few!). If you’re interested in joining a growing team with great perks, we encourage you to apply!

Make a difference here. UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams. By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India. Ultraviolet Cyber is seeking a SOC Analyst to join our Federal Delivery Team. The Security Operations Center (SOC) Analysts will be responsible for 24/7 threat monitoring, analysis, and incident response across a large-scale network infrastructure. Their duties include correlation and triage of security alerts, hunting threats across endpoints and servers, managing custom alert rules, and producing incident response documentation. They will also support firewall, Active Directory, and Sentinel-based monitoring, with escalation responsibilities during COOP or emergency operations. Important to note: Remote with monthly in-person meetings in Washington, DC. Meeting scheduled on the 3rd Tuesday and as-needed-unscheduled in-person meeting(s) with no cost to the Government.Clearance: Must be Public Trust eligibleHours: Full-time (40 hrs/week), standard eight-hour business schedule between the hours of 6:00am and 5:30pm, EST, Monday through Friday. No third-party candidates will be considered • Support with host and network analysis to determine compromise extent and provide mitigation support on compromised systems., • Validate and confirm critical security events and assess impact of the event., • Research and maintain information on current security threats and applying knowledge to the security capability., • Author intrusion detection signatures as well as other detection mechanisms and coordinate with Security Engineering to implement., • Collect information from digital devices as part of legal investigations. Create and report on program tasks., • Interface with the intelligence community in order to better develop and identify malicious activities and events that connect over time to form a pattern of attack., • Recover data like documents, photos and e-mails from computer hard drives and other data storage devices that have been deleted, damaged or otherwise manipulated., • Find evidence of illegal activity involving cybercrime offenses and examine computers that may have been involved in other types of crime., • Use expertise to protect computers from infiltration, determine how a computer was broken in to or recover lost files., • Use forensic tools and investigative methods to find specific electronic data, including Internet use history, word processing documents, images and other files., • Automate workflow processes via scripting with Python or similar., • Work with Cyber Threat Intel Team and maintaining threat indicator feeds., • Build and maintain client and stakeholder relationships., • Formulate and enforce work standards., • Complete projects/deliverables on time and with quality., • Require 3–5 years of SOC analyst experience, • 5+ YOE in general IT and Cybersecurity preferred, • Proficiency in SIEM and EDR technologies, and practical knowledge of Microsoft Defender, Sentinel, Trellix, RSA NetWitness, and incident response playbooks, • Experience demonstrating strong analytical, troubleshooting and problem-solving skills for security information and event management., • Excellent communication skills, both written and oral., • Operational knowledge with types of vulnerability assessors that shall include vulnerability assessment tools, wireless network detection, and non-signature based discovery and case handling tools.Experience with the following technologies:, • Intrusion Detection and Preventions Systems (IDS/IPS)., • Monitoring network security events in an Enterprise Environment., • Producing security event reports for management., • Producing security metric reports for management., • Security Information and Event Management (SIEM) systems. One or more of the following certifications are desired:, • Certified Forensic Computer Examiner (CFCE)., • Certified Hacking Forensic Investigator (CHFI)., • CompTIA Cybersecurity Analyst (CySA+)., • Certified Ethical Hacker (CEH)Additional, • Able to attend monthly in-person meetings in Washington, DC. Meeting scheduled on the 3rd Tuesday and as-needed-unscheduled in-person meeting(s)., • Clearance: Must be Public Trust eligible, • Hours: Full-time (40 hrs/week), standard eight-hour business schedule between the hours of 6:00am and 5:30pm, EST, Monday through Friday., • We provided these clients with cybersecurity-related services while cultivating a common body of knowledge among all employees at UltraViolet., • 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed, • Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment), • Group Term Life, Short-Term Disability, Long-Term Disability, • Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness, • Participation in the Discretionary Time Off (DTO) Program, • 11 Paid Holidays Annually$110,000 - $125,000 a yearWe sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable. UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status. If you want to make an impact, UltraViolet Cyber is the place for you!

Job Description Garner's mission is to transform the healthcare economy, delivering high-quality and affordable care for all. We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures. Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale. About the role: We are looking for a Senior GRC Analyst to join our Technical Compliance team to ensure Garner's compliance posture across security frameworks such as ISO 27001, SOC 2, HITRUST, and HIPAA. As a Senior GRC Analyst, you will run our internal audits, guide our external assessments, and partner with teams across Engineering, Product, People, and Legal so that our controls are designed well, operating effectively, and continuously improving. Our Technical Compliance team safeguards Garner's sensitive healthcare data and protects the trust of our members, clients, and partners by maintaining a strong control environment and regulatory compliance. The work you do here has a direct impact on our ability to win and retain enterprise customers, expand into new lines of business, and scale securely as we grow. Where you will work: This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week. What you will do: • Manage and support our compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle, • Serve as the subject matter expert across the company on our compliance frameworks, • Serve as the primary point of contact for external auditors and assessors, • Manage Garner's Security and Privacy trust center, • Maintain the risk register and drive risk identification, scoring, and reporting, • Manage the maintenance of our compliance policies, standards, and procedures, • Report on our compliance posture to senior leadership, • Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the restThe ideal candidate has:, • 5+ years of experience in GRC, IT audit, or information security compliance, • Prior experience with HITRUST, SOC 2, and ISO 27001 audits, • Hands-on experience with control design, evidence collection, and remediation in a cloud-native engineering environment, • Proven ability to adapt your communication style across engineers, operators, and executives, • A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks, • Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred, • A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedbackTechnologies we use:, • AWS, Okta, Datadog, Retool, Gitlab, Vanta This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare. Compensation Transparency: The target salary range for this position is $132,000 - $165,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com. Equal Employment Opportunity: Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com.

Job Description About the Role Merci Technologies is seeking a SOC Analyst II to join a 24/7 security operations team supporting one of our enterprise clients. This is a hands-on, second-line role at the center of the client's detection and response program. You will spend your day investigating alerts that have escalated past the initial triage layer, separating real threats from noise, and driving confirmed incidents through containment and resolution. The environment is fast-moving and telemetry-rich, spanning cloud and on-premises systems, thousands of endpoints, and a modern security stack built around SIEM, EDR, and email security platforms. Beyond day-to-day monitoring, this role carries real ownership. You will help mature the detection content the team relies on, reduce alert fatigue by tuning out false positives, and contribute to the runbooks and playbooks that keep response consistent across shifts. You will work shoulder to shoulder with senior analysts, threat hunters, and detection engineers, which makes this an excellent position for someone who wants to deepen their technical bench and grow toward a Tier 3 or specialized security engineering track. This is a fully remote position open to Full-Time or Contract candidates. Key Responsibilities • Monitor, triage, and investigate security alerts across SIEM, EDR, identity, and email security platforms, • Own Tier 2 investigation, containment, eradication, and escalation of confirmed security incidents, • Analyze logs, network traffic, endpoint telemetry, and user activity to identify indicators of compromise, • Conduct root cause analysis and document incidents, findings, and response actions per established runbooks, • Tune detection rules, suppress false positives, and recommend new detection logic in partnership with engineering, • Participate in proactive threat hunting based on current threat intelligence and emerging tactics, • Support and contribute to post-incident reviews, lessons learned, and continuous improvement of response playbooks, • Maintain shift handoff notes and ensure continuity of monitoring across a 24/7 coverage model Required Qualifications • 2 to 4 years of hands-on SOC, incident response, or security analyst experience, • Working knowledge of SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar, • Familiarity with EDR tooling including CrowdStrike, SentinelOne, or Microsoft Defender, • Solid grounding in networking fundamentals, TCP/IP, DNS, and common attack techniques, • Ability to interpret logs and telemetry to reconstruct an attack timeline, • Strong written documentation and clear communication under time pressure Preferred Qualifications • Security+, CySA+, GCIH, or equivalent certification, • Experience with SOAR platforms and automation scripting in Python or PowerShell, • Working familiarity with the MITRE ATT&CK framework and threat-informed defense, • Exposure to cloud security monitoring in AWS or Azure What You Will Bring You are curious, methodical, and calm when alerts spike. You enjoy the investigative side of security, you ask good questions, and you document your work so the next analyst can pick up where you left off. You see tuning and automation not as extra work but as the way a strong SOC scales.

Job DescriptionAbout the Company: At Playlist, life's richest moments happen when people step away from screens to move, connect, explore, and play. We're building the definitive platform for intentional living, connecting people with inspiring experiences in fitness, wellness, and beyond. With popular brands like Mindbody and ClassPass, Playlist empowers businesses and individuals, making it effortless for aspirations to become actions. Join us in reshaping technology's role to foster meaningful, real-world connections. Who we are: Playlist's GRC team owns governance, risk, third-party risk, and compliance across a complex, multi-brand environment including Mindbody, ClassPass, Booker, Kite and EGYM and the businesses we continue to acquire and integrate. We sit at the intersection of Security, Legal, Engineering, and Finance, and we operate as builders: standing up programs, harmonizing controls across entities, and turning audit-readiness into something the business can scale with rather than scramble through. We're hands-on, comfortable without a playbook, and biased toward decisions that unblock partners rather than slow them down. If you want to lead a team doing meaningful GRC work at real scale, we'd love to hear from you. Your role: The GRC Manager is a player-coach role responsible for two of the most important threads running through our function: the third-party risk management workflow and Playlist's compliance program portfolio. You'll lead a team of GRC Analysts and Program Managers, set the operating standards for how we assess vendors and run audits, and serve as the GRC team's day-to-day operating leader across the broader function. You'll own the driving of our compliance programs across SOC 1 Type II, ISO 27001, HITRUST, NIST CSF/800-53, and IT SOX. You'll partner closely with Legal, Security Engineering, Product, and Finance to make sure these programs reflect how the business operates, and that compliance requirements arrive as guidance rather than friction. You'll support the TPRM workflow end-to-end; intake, risk tiering, diligence, and ongoing monitoring across our multi-brand vendor footprint. You'll be the person who turns strategy into execution, building the team, the cadence, and the tooling that make our compliance posture durable as the portfolio continues to grow. You'll pursue continuous improvement to help Playlist achieve its mission: Powering the world's fitness and wellness businesses and connecting them with more consumers, more effectively, than anyone else. You will: • Manage and develop a team of 3–5 GRC team members, set quarterly OKRs, run 1:1s, hire to fill gaps, and coach on technical depth, stakeholder management, and audit discipline., • Own the third-party risk management workflow end-to-end across Playlist's multi-brand vendor footprint, vendor intake, risk tiering, due diligence, contract risk review, and ongoing monitoring and continuously tune the program as vendor volume scales with acquisitions, • Lead Playlist's compliance program portfolio across SOC 1 Type II, ISO 27001, HITRUST, NIST CSF/800-53, and IT SOX scope, control design, evidence collection, and external audit coordination across the brand footprint, • Serve as primary point of contact for external auditors and assessors, manage audit timelines and finding remediation, and challenge scope and interpretation when it matters, • Own the GRC team's operating cadence, planning rhythms, staff meetings, intake queues, and how the team interfaces with Security Engineering, Legal, Privacy, and Procurement, • Drive Playlist's compliance automation platform forward, design how controls and evidence flow through the tool, automate high-volume evidence collection, and evolve the tooling strategy as the program scales, • Partner with Legal, Security Engineering, Product, and Finance to surface compliance and third-party risk early in product and infrastructure decisions, with clear accept, mitigate, reject recommendations for partner teams About the right team member: You're a builder-mindset GRC leader who can run multiple programs in parallel without dropping the standard of work. You see gaps and close them without waiting to be told. You lead from the front, be comfortable rolling up your sleeves to run a control walkthrough one day and coaching an analyst through a tricky stakeholder conversation the next. You think in terms of how programs scale, not just whether the current audit gets signed. You partner well across the business, especially with Engineering and Legal, because you treat compliance as something to design into the work rather than to impose it. You're motivated by high autonomy, direct impact, and the chance to shape how a growing GRC function operates. You'll thrive in this role with experience in: • 7+ years of progressive Information Security GRC, Compliance, or Audit experience, including at least 2 years of direct people management, • Hands-on program ownership across multiple compliance frameworks: SOC 1 Type II is required, plus working depth in at least two of ISO 27001, HITRUST, NIST CSF/800-53, or IT SOX, with the ability to map and rationalize controls across frameworks., • Demonstrated ownership of a third-party risk management workflow at scale, vendor intake, risk tiering, diligence, and ongoing monitoring including the operating standards and SLAs that hold the program together, • Hands-on experience with a compliance automation platform (Drata, Vanta, Hyperproof, Secureframe, Optro or similar) and a clear point of view on how tooling should scale with program growth, • Strong project management skills, can run multiple audits and integration workstreams in parallel without dropping deadlines, • Direct experience managing external auditors and assessors, including comfort challenging scope and interpretation, • Excellent written and verbal communication, with the ability to translate compliance and risk findings into clear executive and partner-team updates Nice to Have: • Experience integrating acquired companies into an existing compliance program, including control harmonization and audit scope decisions, • Background working in a multi-brand or SaaS / consumer-marketplace environment, • CISA, CIPP/US or CIPP/E, ISO 27001 Lead Implementer / Lead Auditor, or PCI ISA certification, • Detection or security engineering literacy strong enough to partner technically with Security Engineering on control design It is Playlist's intent to pay all Team Members competitive wages and salaries that are motivational, fair and equitable. The goal of Playlist's compensation program is to be transparent, attract potential employees, meet the needs of all current employees, and encourage Team Members to stay with our organization. Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skill set, depth of experience, certifications, and specific work location. The base salary range for this position in the United States is $130,000- $175,000. The total compensation package for this position may also include a performance bonus, benefits, and/or other applicable incentive compensation plan. Have we piqued your curiosity? Sound like the role for you? We'd love to hear from you! Even if you're not 100% sure about potential fit, we still encourage you to apply. We're looking for the right person, not the perfect series of checkboxes. The Company is an Equal Opportunity Employer. We highly value diversity at our company and encourage people of all different backgrounds, experiences, abilities and perspectives to apply. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other protected characteristics. By entering your email and phone number and submitting your application, you consent to receive emails, calls and SMS about your application and other roles at The Company, including by auto-dialer. Message and data rates may apply. Opt-out or text STOP to cancel at any time. If you are a California resident or reside outside the United States then by submitting your application you confirm that you have read, understood, agree and - where applicable - grant your prior, free, informed and express consent for the processing of your personal information, including sensitive personal information, as described in our California Applicant Privacy Notice or International Applicant Privacy Notice (as applicable). Note: This description outlines key responsibilities but isn't intended to cover every task or duty. Additional responsibilities may be assigned as needed to support the team and business goals.

Job Description Garner's mission is to transform the healthcare economy, delivering high-quality and affordable care for all. We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures. Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale. About the role: We are seeking a Security Analyst to join our Security team. This role is critical to maintaining the security of our app and the infrastructure that supports it. You will be responsible for identifying and mitigating risks across our environment, ensuring that Garner's security posture remains robust and that our commitment to protecting member data is never compromised. Where you will work: Garner is headquartered in NYC, but this position is available for individuals who are comfortable with remote work and occasional travel to HQ. What you will do: • Independently manage day-to-day security operations (SecOps/SOC), including threat monitoring and incident triage with intense urgency., • Conduct systematic reviews of system logs and alerts using Wiz and Datadog to uncover root causes and solve for underlying vulnerabilities., • Use LLMs (like Claude) to interrogate the health of services and automate security-based data analytics at scale., • Navigate hundreds of Kubernetes clusters and disparate data sources to find the "signal in the noise" using SQL and Boolean logic., • Build and implement security controls and automated responses within the AWS ecosystem using Python, Go, or TypeScript., • Convey technical findings and forensic research concisely to engineering and product teams with clear, actionable remediation steps., • Own the execution of recurring compliance tasks and documentation, ensuring all security deliverables are error-free and meet regulatory standards., • Identify opportunities to automate manual security checks, moving the team toward a more proactive security engineering model over time.The ideal candidate has:, • 2+ years of experience in Security Operations, SOC, or a related field, preferably within a scaling startup, • Proven experience in incident response, including triage, investigation, and resolution in high-pressure environments, • Hands-on experience with security and observability tools such as Wiz and Datadog, particularly from a forensic or MTDR perspective, • Strong SQL skills and demonstrated ability to analyze large, complex datasets across distributed systems, • Experience identifying patterns and extracting meaningful insights from high-volume data ("signal vs. noise"), • Familiarity with on-call rotations and a willingness to participate as needed, • Experience or demonstrated interest in leveraging AI/LLMs (e.g., Claude) for data analysis, troubleshooting, or system interrogationTechnologies we use:, • Wiz , Datadog , Cyberhaven. Claude, Snowflake , SQL, AWS , Terraform, Kubernetes, Python, Go, TypeScript. This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare. Please note: We are unable to sponsor or take over sponsorship of an employment visa at this time. Compensation Transparency: The target salary range for this position is $117,000 - $130,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com. Equal Employment Opportunity: Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com.

Job DescriptionPlease note: This position description is for RFQ response. There is no active vacancy at this time.About FedSync: Since our inception, FedSync has stood for Accountability, Integrity, Teaming, Value, Innovation, and Quality-the core values that define who we are. Our vision is to collaborate with innovative, forward-thinking leaders to deliver solutions that look beyond today. Our mission is to provide the federal government with proven, innovative solutions that transform organizations by equipping them with the right tools and people to meet tomorrow's challenges. At FedSync, our people matter-both our employees and our clients. Position Overview The Cybersecurity Analyst proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive DOE data and maintain enterprise resilience. This role drives risk reduction by analyzing incidents, implementing controls, and collaborating with cross-functional teams to strengthen the organization's security posture. Five (5) Cybersecurity Analysts are required for this engagement. Work will be a hybrid schedule withe 3 days in the office and 2 days of telework. Key Responsibilities • Perform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of DOE systems, applications, and data assets., • Analyze security alerts and events to identify indicators of compromise (IOCs), attack patterns, and emerging threats across on-premises, cloud, and hybrid environments., • Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision-making and prioritization., • Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact., • Monitor, analyze, and detect cybersecurity threats across multiple security domains including Security Operations (SOC), Cloud Security, Infrastructure Security, Information Protection, and Data Protection., • Monitor security alerts through the SIEM platform and execute immediate triage and incident response protocols., • Conduct proactive threat hunting to identify hidden threats and adversary behavior., • Implement, tune, and manage DLP controls across endpoints, email, and cloud collaboration platforms., • Ensure alignment with federal and regulatory security standards (NIST, FISMA) and internal cybersecurity policies., • Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments. Minimum Qualifications • 5+ years of experience in cybersecurity analysis, security operations, or a related field., • Demonstrated experience performing threat triage, incident response, and risk analysis., • Proficiency with SIEM platforms, vulnerability scanners, and cloud security tools., • Working knowledge of NIST and FISMA compliance frameworks., • Experience supporting security in large enterprise or public-sector environments preferred. Required Certifications (one or more) • CISSP, CompTIA Security+, CompTIA CySA+, • CEH (Certified Ethical Hacker), • GCIA, GCIH, CISA, or CCSP Technologies & Tools • SIEM: Devo / Splunk, • Vulnerability Scanners: Rapid7 / Armis, • Cloud Platforms: AWS / Azure, • Wireshark, SQL, Python, MS Power BI, Microsoft Office Suite Acceptable background check including criminal history background check and credit Check.

We’re _! AI For Financial Advisors If you know Elixir (or would be excited to learn it!) and the following sounds fun to you, please come help us build an awesome product & company! We have an efficient hiring process that takes about a couple of weeks from when you apply to when you receive an offer! Interview Process A 30 minute live coding exercise A paid trial week where you build a feature we really need, attend our morning team meeting and meet team members. Required Qualifications Experience & Technical Expertise Candidates should have at least 12 years of software development experience, with a minimum of 5 years in senior or staff-level engineering roles. Deep expertise in at least one major programming language and ecosystem is essential, along with broad knowledge across multiple languages, frameworks, and architectural patterns. Experience designing and operating distributed systems at scale is required, including understanding of microservices, event-driven architectures, and cloud-native patterns. System Design & Architecture Demonstrated experience architecting large-scale systems that handle significant traffic, data volumes, or complexity is crucial. This includes expertise in areas such as API design, data modeling, system integration, performance optimization, and reliability engineering. You should be comfortable making architectural trade-offs and articulating the reasoning behind technical decisions to both technical and non-technical stakeholders. Leadership & Communication Strong written and verbal communication skills are essential for this role. You must be able to create clear technical documentation, present complex ideas to diverse audiences, and facilitate productive technical discussions. Experience leading technical initiatives across multiple teams, influencing without direct authority, and building consensus around technical decisions is required. Here’s all the stuff engineers want to know All Elixir/Phoenix/LiveView with relatively few dependencies About 30 integrations with a consistent client interface, all based on Tesla (Finch adapter) Consistent patterns across the codebase The latest LiveView and LiveView features Tailwind for styling, default esbuild for js Distributed elixir with libcluster (k8s adapter) Liveview tests, wallaby for e2e tests when js is involved A super powerful and interconnected admin interface so it’s very easy to debug problems and collaborate Great logging and observability with GCP logging, appsignal, Prometheus, grafana, etc Github (rebase merge and squash) One review is required to merge The author has complete responsibility and authority of their code. No gatekeeping. Requires being a good citizen We move extremely fast. Many bug fixes and small features every day. A big feature typically started and shipped in a few days. Automatic staging environments for every PR Seeking founder-minded devs who are self-driven and want to come in, understand the business and customers and take initiative to do the right things Hammox for testing. Only a few mocks for the very boundaries of the app (MockHTTP, MockTime, etc) We do a ton of cutting-edge stuff with LLMs (OpenAI and Anthropic) and have a robust framework for routing prompts to different models and testing new prompts/models. We use prompt caching, JSON mode, function calling, assistants, etc Host our own embeddings with pgvector We do some Rust/Rustler stuff, C/NIF stuff We use the adapter pattern a lot. It’s really easy to add new integrations. Absinthe for GraphQL (for mobile apps) All infrastructure is in terraform. Everything. Github, cloudflare, etc. If there’s a provider we use it. We’re hosted on GCP, k8s on GKE, all configured in Terraform. No YML. Postgres 15 on Cloud SQL. One read replica but we can add more easily. SOC 2 with Vanta We’re a small and efficient dev team We’re growing gangbusters. All revenue-backed, super low churn. Raised a $20M series-A a few months ago Health/Dental/Vision insurance 401k (no match right now) Take the time you need PTO (4 weeks-ish, but we don’t keep track) $150k-$260k depending on experience Based in SLC, Utah Fully remote OK (must reside in the USA). We’d like it if you’d fly in occasionally to get to know you. Workday must overlap by at least 3 hours with Denver, CO, USA Must be a resident of United States Jump’s mission is to empower financial advisors and their clients to thrive in the age of AI. Jump’s primary product is an AI assistant helping financial advisors with their client meeting cycle and other workflows. Jump’s product is expanding to include many other advisor workflows, as well as into other finserv verticals. Jump leads its category in market share, customer satisfaction, and analyst rankings, and has grown rapidly. Jump customers include leading independent broker dealers such as LPL, Osaic, Raymond James, and Cetera, and leading RIAs including Focus Financial, Merit, Savant, Allworth, Sanctuary Wealth, Integrated Partners, and more. Jump was launched in 2023 by repeat entrepreneurs and is led by a team with backgrounds from Harvard, Stanford, Google, Snowflake, Bill.com, JPMorgan, Fidelity, Bain, Bain Capital Ventures, Auditboard, Nitrogen, and eMoney. Jump is a Series A company backed by top venture capital firms and industry strategics including Battery, Sorenson, Pelion, and Citi. Jump’s team values are High Velocity, World Class, and Direct + Kind + No Drama. Please consider joining us in our work to transform the client and advisor / rep experience in financial services by delivering cutting edge, practical, compliant AI technology to help those who help safeguard the financial future of everyday people everywhere

Title: Cyber Security Analyst Location: Remote (U.S., New York Preferred) About Rhymetec: Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cyber security and data privacy. Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs. This role is fully remote. Job Description: The Cyber Security Analyst (CSA) will be responsible for architecting, developing, and implementing solutions that help Rhymetec's clients achieve, manage and measure security metrics and compliance requirements. The role will work closely with their team to help design and deliver security and compliance objectives and have the ability to help drive foundational changes in internal cloud platforms to enhance their security posture. The ideal candidate will have a team first mentality and fit within the core values and culture at Rhymetec, along with project management experience and knowledge with customized compliance road maps for clients. This person will be responsive to both customers and team members with communications, be detail oriented, and hold a high level of autonomy to complete work on time and with quality. Responsibilities: • Prepare agendas and reference documents for meetings with clients., • Assist in building and managing cyber security programs for Rhymetec’s customers based on industry standard cyber security compliance frameworks., • Conduct meetings with clients regularly., • Configure performance monitoring alarms in AWS, Azure, GCP, Datadog and other cloud infrastructures., • Configure Security alarms and Intrusion Detection Systems in AWS, GCP, Azure, • Set up supporting security applications., • Set up mobile device management applications such as Jamf, Jumpcloud, Microsoft Endpoint manager, Hexnode, etc., • Configure and maintain compliance monitoring platforms., • Conduct internal audits, risk assessments, and generate reports., • Conduct Incident Response Tabletop exercises with clients., • Conduct Business Continuity and Disaster recovery tabletop exercises with clients, • Document and lead incident response process should an incident arise., • Translate SOC 2 Type 2, ISO 27001, CMMC, GDPR, and HIPAA controls into actionable items for clients., • Conduct employee access reviews, SaaS vendor security assessments, and gap assessments., • Triage bug/vulnerability reports from security researchers., • Complete security questionnaires on behalf of clients., • Draft supporting documents for clients’ information security management systems and information security policies., • Gather and maintain evidence of compliance for various frameworks., • Lead engagements with auditors on behalf of clients., • Communicate tasks to clients’ employees and educate clients on security best practices. Qualifications: • Bachelor's Degree from an accredited university in a Technology or Cybersecurity field OR 4+ years of direct experience in listed areas., • 3+ years of work experience working with technology, cybersecurity, and regulatory compliance., • Experience in customer service and ability to develop professional relationships with customers., • Extensive knowledge of compliance, regulatory frameworks, and implementing SOC 2, ISO27001, CMMC, HIPAA, GDPR, NIST 800-53 and other compliance frameworks., • Strong logical security skills, with experience in cloud security., • Understanding of cloud environments (AWS, GCP, Azure) and integrating security controls through DevOps and Infrastructure as a Service (IaaS) techniques., • Preferred Certification(s): Cloud+, CySA+, CISSP, CISM., • Quarterly travel may be required. Benefits Rhymetec offers a robust employee package, including: • Employee covered medical premiums (100%), • Dental and Vision Benefits, • PTO and Sick Time, including 11 paid Holidays, • 401K retirement plans with company match options, • Company paid Life Insurance, • Annual Subscription to TalkSpace (online counseling & therapy service), • Summer Fridays! Rhymetec is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetic, disability, age, or veteran status.

We help the world Be Everyday Ready™ Today’s threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools — all augmented by AI and driven by seasoned operators. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. Role Summary:The Director of Product Design will lead the vision, strategy, and execution of product design across Cyderes’ MDR platform and customer experiences. This role is responsible for building a cohesive, user-centered design function that simplifies complex security workflows and elevates Cyderes’ product experience. You will partner closely with Product Management, Engineering, SOC leadership, Threat Research, and Go-To-Market teams to ensure design is embedded early and deeply into product strategy and execution. This is a hands-on leadership role combining design craft, systems thinking, and people leadership. • Define and own the product design vision across Cyderes’ MDR platform, ensuring a consistent, intuitive, and scalable user experience., • Translate complex security data, workflows, and SOC operations into clear, actionable, and elegant experiences., • Establish and evolve Cyderes’ design principles, standards, and design system., • Lead end-to-end design for core workflows including alerting, investigation, response, reporting, and customer visibility., • Proactively build trusted relationships with Product Management and Engineering to deliver customer delight, easy usability and intuitive value, • Champion user research and usability testing to deeply understand customer, analyst, and internal SOC user needs., • Use insights from customers, SOC analysts, and stakeholders to inform design decisions and priorities., • Balance usability, speed, accessibility, and scalability in a complex enterprise environment to quickly drive results, • Build, mentor, and manage a high-performing team of Product Designers and UX professionals., • Foster a strong design culture focused on collaboration, craft excellence, and customer outcomes., • Own and scale a robust design system that supports consistency, efficiency, and accessibility across products., • Ensure design quality, usability, and visual excellence across all product surfaces., • Establish processes for design reviews, critiques, and continuous improvement., • Communicate complex concepts with clarity to leadership, • 10+ years of experience in product design or UX, with 4+ years in a design leadership role., • Experience designing complex B2B SaaS or enterprise platforms., • Strong portfolio demonstrating systems thinking, workflow design, and impact at scale., • Proven experience partnering with Product and Engineering leaders., • Excellent communication, storytelling, and stakeholder influence skills., • Experience in cybersecurity, data-intensive platforms, or developer/analyst tools., • Familiarity with SOC workflows, alerting systems, dashboards, or security analytics., • Experience building and scaling design systems., • Experience leading design in a fast-paced, high-growth environment.Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status. Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Dragos is on a relentless mission to defend industrial organizations that provide us with the necessities of modern civilization; running water, functioning electricity, and safe industrial working environments. As the market leader in ICS/OT Cybersecurity, we are dedicated to arming our customers with best-in-class technology, threat intelligence, and services to protect their systems as effectively and efficiently as possible. We’re a remote-first culture with operations in North America, Europe, the Middle East, and APAC. We’re looking for mission-oriented teammates who embody our core values of authenticity, transparency, and trust. Are you ready to make a difference? Come join a mission that can save the world! About the Role: As a Senior Technical Account Manager, you'll build strong relationships with our customers, becoming their go-to advisor. You'll help drive product adoption, solve technical challenges, and ensure successful deployments. You'll also provide custom content, offer product recommendations, and gather feedback to improve our offerings. Responsibilities: • Serve as a Dragos Platform power user to the customer helping them achieve success with the technology for their overall ICS security efforts., • Build strong customer relationships, especially with key customer stakeholders., • Address customers’ technical requests; proactively resolve issues and make sure they manage to avoid problems., • Provide advice, guidance, and technical know-how to ensure successful ongoing usage and adoption., • Manage customer expectations while holding them accountable., • Be the internal champion; make it your business to know who to lean on for assistance within Dragos; know when to sound the alarm., • Conduct health checks and promote self-advocacy., • Engage with internal teams: sales, field operations, technical support, engineering, product management, and more., • Track key account metrics; communicate progress to internal and external stakeholders., • Identify service opportunities, training needs, and key areas of improvement for the business unit., • Up to 25% travel Qualifications: • 4+ years of experience working in enterprise cybersecurity, as a SOC analyst or cybersecurity engineer., • Knowledge of Industrial Control Systems (ICS) and Operational Technology (OT) systems and environments., • Understanding of SOC/SIEM workflows (Splunk, QRadar, FortiSIEM, Elastic) and cybersecurity concepts such as network segmentation, secure remote access, and vulnerability management., • Familiarity with SecOps concepts (Event Triage, Incident Response, Investigation)., • Customer-first attitude; a listener who is customer-oriented and attentive to their needs., • Critical thinker with problem-solving skills; enjoys solving technical and challenging issues., • Eastern Time Zone preferred. Compensation: • OTE: $144,000, • Competitive Equity Package, • Comprehensive Benefits Plan #LI-JF1 #LI-REMOTE #LI-NH1 #LI-REMOTE Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.

(this position is remote but candidates must be based and able to work without restriction in the United States) What we believe In the past two years, more than a trillion dollars have been invested in software companies at record prices. And in many cases, the underlying tech is the greatest enabler to the business strategy. But has the approach to govern technology value creation caught up to the magnitude of the risk? We believe a better way is possible – a more programmatic, proactive approach to actively manage technology throughout the investment lifecycle – and that’s what we do. Our role We know that technology can create truly transformative change, and its role in business is only growing. Crosslake is here to support the changemakers and help them buy, build and run better technology. What we value You could be a good fit for Crosslake if you see yourself reflected in our guiding values: Service. We effect change by empowering others. Curiosity. We believe great advice starts with deep understanding. Credibility. Our expertise is earned and proven. Commitment. It’s our privilege to serve clients in their critical moments. Creativity. We are inspired by the constant pursuit of better. In this role you will: Work with our private equity and portfolio company clients, consulting on how to apply an information security vision and strategy in alignment with customer business objectives. Work with customers to assess and address information security risks. Interact with customers executives (EX: CIO, CTO, CEO, DPO) to understand and implement desired change in the customers organization. Assist in leading enterprise-wide cybersecurity operations teams, processes, and responses. Assist in managing customer security programs including the achievement and/or maintenance of key compliance initiatives such as SOC, ISO27001, NIST, PCI, and SOX. Execute and direct the identification, containment, mitigation, and recovery activities related to cybersecurity incidents that may negatively impact customer assets or services. Represent Crosslake in industry cybersecurity forums and working groups, including sector-specific cyber threat intelligence communities. Work with customers to evaluate, implement, and secure key systems within their environment. Analyze and assess customer systems for security / risk exposure and provide business-prioritized remediation recommendations. Assist in handling the documentation, development, implementation, and maintenance of processes related to strong security and compliance controls in customer environments. Work with Operations teams to ensure security architectures are appropriately assessed and able to be supported. Work with Engineering and Operations teams to implement new technologies and security solutions in alignment with industry best practice and commonly accepted principles of secure design. • Knowledge of legal and regulatory requirements, including the frameworks such as ISO27001, PCI, HIPAA, SOC, SOX, and NIST., • Strong knowledge around the requirements of the above frameworks and implementing security best practices within an organization., • Solid understanding of business management processes, including employing information security risk management and cybersecurity technologies, • Knowledge of application security, cloud security, encryption techniques, identity and access management, mobile security, network security, and virtualization security., • 15+ years securing organizations as an in-house team member or advisor / consultant in roles like: Chief Information Security Officer, Director / Manager of Information Security, Director / Manager of Compliance, Principal Security Analyst, Principal Security Engineer, Security Architect, • Demonstrated history of being able to successfully implement security controls within an organization., • Experience in leading within a fast-paced, complex organization., • CISSP or equivalent certification is preferred., • Ability to work from home (or an office of your choosing) and be self-directed, but also effectively collaborate with the team in both a remote and in-person capacity., • Strong technical acumen and technical horsepower, • Be willing to learn and take on new areas that may be outside of your initial comfort zone., • Passion towards making others great and making a high-performing team even better., • An action-oriented personality – you know how to get stuff done., • Great communicator to peers, clients, executive leadership, and boards, • Understanding customer objectives and driving results toward those objectives, • Ability to learn fast and on-the-job., • Responding effectively to rapid change in needs, processes, and technologies, • Ability to understand key concepts and communicate clearly and concisely, including technical details and processes., • Ability to collaborate effectively and build relationships at all levels, especially with senior leaders., • Strong organizational skills with the ability to perform under pressure and manage multiple priorities with competing demands for resources., • Robust analytical, data processing, and problem-solving skills, • Proficiency in process formulation and improvement, • Strong analytical skills, including managing multiple projects under strict timelines and working effectively in a dynamic environment to meet objectives.Crosslake Technologies

Requirements - 3+ years of hands-on experience as a SOC analyst in a production SOC environment (Tier 2 or above strongly preferred). Mercor is hiring SOC Investigation Specialist** on behalf of high-growth technology and enterprise partners building next-generation SOC automation and AI-driven inve

US Base Salary Range: $139,991 - $174,009 About Us Bonterra exists to propel every doer of good to their peak impact. We measure that impact against our vision to increase the giving rate as a percentage of GDP from 2% to 3% by 2033. We know that this goal is lofty, but we are confident that the right technology and expertise will strengthen trust in the sector, allowing the social good industry to accelerate growth and reach peak impact. Bonterra's differentiated, end-to-end solutions collectively support a unique network of over 20,000 customers, including over 16,000 nonprofit organizations and over 50 percent of Fortune 100 companies. Learn more at bonterratech.com. About the Role Bonterra's Information Security, Risk & Compliance team is hiring a Lead PCI Compliance Analyst to own our PCI DSS Level 1 certification program, partner with Engineering on PCI security by design, and serve as a senior risk analyst within the Risk function. This role works horizontally across the company, advising engineering and product teams during the design phase of greenfield payment work, leading response and coordination for PCI Level 1 events, and extending PCI risk analysis to cover AI components introduced into payment systems. It sits at the border of compliance and engineering, requiring fluency in both control design and technical architecture, and supports related frameworks such as ISO 27001:2022 and SOC reporting. Job Responsibilities Own end to end PCI DSS Level 1 readiness, certification activities, and coordination with QSA assessors Advise Engineering and Product teams during the design phase on PCI control selection, scope containment, and security by design patterns for both greenfield and modernization payment architectures, with depth across the following engineering disciplines: Tokenization architecture: tradeoffs between vault based and vaultless tokenization, format preserving encryption, scope reduction analysis, and the downstream impact on application code paths, storage layers, and integration points with acquirers and processors Cardholder data environment network segmentation: VLAN and microsegmentation strategies, service mesh policy enforcement, ingress and egress controls, jump host and bastion design, and segmentation validation testing under PCI DSS v4.0.1 Requirement 11.4.5 Cryptographic key management: HSM and cloud KMS architecture, FIPS validated cryptographic module selection, key hierarchy and envelope encryption, key rotation cadence, and separation of duties for key custodians under Requirements 3.6 and 3.7 Secure SDLC and threat modeling for payment flows: STRIDE and PASTA modeling of authorization, capture, and settlement paths, SAST, DAST, and SCA gating, secrets scanning, and software supply chain controls including SBOM generation, signed artifacts, and build provenance Logging, monitoring, and file integrity: append only audit logs with cryptographic integrity, file integrity monitoring across ephemeral and containerized workloads, and centralized log aggregation with PCI specific correlation rules under Requirement 10 Lead and manage response to PCI Level 1 events, including investigation, evidence preservation, control failure analysis, executive communications, regulator and brand notifications where applicable, and remediation oversight through closeout Serve as a Senior Risk Analyst within the Risk function, conducting in depth risk analysis on PCI security by design questions and on AI components embedded within payment systems (including model inference, prompt and data flows touching cardholder data, retrieval pipelines, and third party AI services entering PCI scope) Drive greenfield workstreams that establish new PCI controls, scope boundaries, or architectural patterns rather than only maintaining existing ones Partner with Product Security on modernization initiatives that reduce PCI scope and improve control design Maintain scope documentation, evidence, and operational reports for PCI controls Manage issues, exceptions, compensating controls, and risk acceptance tracking with timely remediation Align PCI evidence and controls with ISO 27001 and SOC frameworks to streamline reporting Support audits, vendor assessments, and customer due diligence requests related to PCI Maintain compliance ticket queues, supplier and control registers, and awareness activities Collaborate with Information Security, Risk & Compliance team members and control owners companywide Requirements 7 or more years of PCI DSS program management experience with direct involvement in Level 1 merchant or service provider assessments under DSS v4.0.1 Demonstrated experience advising engineering teams during the design phase, translating PCI requirements into architectural and implementation guidance engineers can execute against, including for greenfield builds at the border of compliance and engineering Proven track record leading or coordinating PCI Level 1 events end to end, from initial triage through executive reporting, evidence package delivery, and remediation closeout Senior risk analyst depth: ability to conduct independent risk analysis at the requirement level and at the architectural level, including scoping determinations, compensating control construction, security by design tradeoffs, and risk acceptance documentation defensible under audit Working understanding of AI and machine learning components in payment or cardholder data environments, including how model inference, vector stores, retrieval pipelines, and third party AI services intersect with PCI scope and data flow assumptions Experience engaging QSAs from an authoritative posture, substantiating risk positions with documented evidence rather than deferring to QSA interpretation Hands on field experience working directly within engineering and infrastructure teams to evaluate control implementation at the technical layer and translate requirements into actionable remediation tasks Familiarity with ISO 27001 and cloud native service environments Strong analytical, organizational, and communication skills with the ability to produce defensible compliance documentation under audit conditions Experience with GRC platforms, ticketing systems, and security tooling (for example SIEM or vulnerability scanners) Preferred certifications: PCIP, ISA (prior QSA credential strongly preferred), CISA, CISM, CISSP At this time, we are unable to consider candidates who require current or future sponsorship for employment authorization. Our Culture At Bonterra, we're innovating with a higher purpose: to increase giving to 3% of US GDP by 2033, creating $573 billion more in global impact every year. At Bonterra, we foster an inclusive, equitable culture where every team member belongs and contributes to meaningful impact. Read more about our values and culture here. Compensation & Benefits We offer a comprehensive benefits package that supports your health, well-being and growth - explore full details here. Compensation and benefits for this role apply to full-time employees in the United States and may vary based on local standards, laws and norms. Pay is determined by location, skills, experience, and education, and is one part of Bonterra's total rewards package, which may also include bonuses, incentives, equity, and a comprehensive benefits program. Equal Opportunity & Accommodations At Bonterra, we are proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We provide equal employment opportunities without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, veteran status, or any other characteristic protected by law. If you require a reasonable accommodation during the application process, please submit a request. #J-18808-Ljbffr

Weiatech, LLC is seeking a SOC Tier 3 Analyst to serve as senior technical authority within the Security Operations Center.This role focuses on advanced incident response and threat hunting, leading investigations into sophisticated threats and providing expert guidance during major incidents.The id

Concept-Plus is looking for a SOC Analyst in Fairfax, Virginia, to enhance their Enterprise Cybersecurity Operations Support Team.In this role, you will monitor networks and conduct initial analyses to identify potential security events using cybersecurity tools like Splunk and ACAS.The ideal candid

This role involves advanced threat detection and incident response aligned with federal standards.

Who We Are If you feel like Incident Response and Recovery hasn’t changed in the past 10 years, you’re not alone. Business operations aren’t just on endpoints anymore. It’s behind applications in Okta tiles, auto-scaling workloads, code repos, and sprawling data stores across one or many public clouds. At MOXFIVE, we’re focused on eradicating adversaries across our client’s entire digital footprint, and that demands a faster, nimbler approach to DFIR. We know high quality incident response starts and ends with great people. MOXFIVE is looking for the weekend warriors, the late-night crusaders, or any variation in between to do investigative work at a pace that matches your lifestyle. Who You Are You’re a “retired” incident responder that’s called it quits because of missed one too many holidays and an exhausting on-call schedule. If you’re honest though, you miss the investigation. Finding actual evil and seeing the latest threat activity is more exciting than your day job, and you’d love to get your fix on some live response data without committing all your waking hours. You know that $I30 isn’t referring to your local interstate, and that the easiest way to get on your bad side is to be handed a timestamp that isn’t in UTC. You’ve got a “Tools” folder sitting on your workstation somewhere with your favorite forensic scripts at the ready to tear into the next piece of suspicious activity you see. And speaking of suspicious activity, you’ve honed a keen sense for knowing the difference between legitimate users and threat actor activity because you’ve seen them in action. Hundreds of times. Windows environment investigations feel like the back of your hand at this point, and you’ve been starting to expand your knowledge on cloud-native forensics. Account takeovers are the new malware after all, and investigating the latest threats across Azure, GCP, AWS, and SaaS Apps is the growing frontier you’ve been looking to sink your teeth into. You’re insatiably curious, addicted to threat intel, and an investigator at heart. Ultimately, you’d love an opportunity that allows you to get deeply technical and solve real cases at an intensity that’s compatible with your day job and every day life. Why You Matter You’ll be joining a seasoned team of high performing incident response consultants as part of our contract bench that are the tip of the spear for all forensic activity at MOXFIVE. With that, you’ll be eligible for picking up live response work and analysis to support breaches ranging from ransomware to nation-state threats at a schedule that makes sense for you. Your analysis expands our capacity to support clients at the highest level of quality. What You'll Bring Experience responding to threat activity as an IR consultant or SOC analyst Strong understanding of Windows/Mac/Linux fundamentals, forensic artifacts, BEC analysis, and network analysis Existing knowledge or passion to learn cloud-native investigations across AWS, GCP, and Azure An unwavering emphasis on investigation at the highest level of quality Perspective and voice to continue to shape our practice At least a few free hours a week on your schedule to take on IR work. We’re day-job friendly (as long as your employer is cool with it). Disclaimer : All official MOXFIVE communications will only come from an @moxfive.com email address. #J-18808-Ljbffr

We are seeking a talented Senior Governance, Risk, and Compliance (GRC) Analyst / Engineer to join our innovative team focused on advancing robotic delivery solutions in urban environments. In this role, you will collaborate with business and technology stakeholders to ensure security best practices are integrated across our systems and processes. As a high-level subject matter expert, you will assess and mitigate risks related to the company’s financial and IT systems, supporting the growth of our cutting-edge robotics platform that is already transforming city deliveries in multiple markets. Requirements Knowledge of ISO 27001/2, SOC 2 trust principles, and information security best practices Experience in compliance frameworks such as SOX Section 404 IT General Controls, GDPR, CCPA Familiarity with security documentation, risk assessments, and audit procedures Experience with compliance audits and supporting third-party vendor risk assessments Proficiency with GRC or IRM tools such as Archer, ZenGRC, RSAM, or Vanta Ability to develop and analyze security and compliance metrics using BI tools like PowerBI or Looker Excellent project management skills with the ability to prioritize in a fast-paced environment Desired certifications: ISO/IEC 27001 Lead Implementer/Auditor, CISA, CISSP Responsibilities Serve as a subject matter expert on security best practices and compliance standards Maintain and update security policies, procedures, and assessment methodologies Manage security awareness initiatives and conduct phishing simulations Perform risk assessments of third-party vendors and implement corrective actions Support IT audits, track findings, and ensure remediation activities are completed timely Oversee compliance frameworks, risk control matrices, and automation tools Prepare reports and updates for senior leadership on compliance status and risk mitigation efforts Equity participation in a fast-growing, innovative public company (spun off from Uber and Postmates) Opportunity to grow within a pioneering robotics company Work remotely from anywhere in a flexible, collaborative environment Join a diverse team of industry veterans solving real-world urban mobility challenges #J-18808-Ljbffr

Alignerr is looking for a Security Operations Analyst to work remotely on groundbreaking AI security systems. You will leverage your real-world SOC expertise to enhance AI's understanding of cybersecurity threats. Join us to utilize your skills in an engaging environment where your contributions sha

Minimum of 4 years of experience in a Security Operations Center (SOC) or cybersecurity operations role. Position Description Ardent is seeking a Security Operations Center (SOC) Analyst to support 24x7 security monitoring, alert triage, and incident response activities across enterprise environment

A cybersecurity firm in the United States seeks a Senior SOC Analyst/Engineer to lead incident response and mentor junior analysts. Candidates should have 4+ years in SOC analysis or incident response, with strong skills in SIEM and malware analysis.

Concept Plus is seeking a SOC Analyst to support cybersecurity operations through monitoring and incident reporting.

Corinth is seeking a SADOM Analyst to enhance security operations through expert maintenance of tools in a remote environment.The role involves ensuring 24/7 availability of security applications, optimizing security incident response capabilities, and requires a Bachelor's degree along with relevan

The role involves monitoring security alerts, supporting incident workflows, and ensuring smooth transitions with international teams.

A leading cybersecurity firm seeks an experienced L3 SOC Analyst to join their remote team. In this role, you'll own complex security incidents, analyze and respond to high-severity events, and optimize SOC processes. This position offers the chance to grow your skills in a mature 24/7 SOC environme

We are looking for experienced cybersecurity professionals to join our team to help train AI models.In this role, you will evaluate AI-generated security content, solve technical cybersecurity problems, and provide feedback to improve how AI systems reason about real-world threats and defenses.Cyber

Develop and improve SOC playbooks and decision trees, ensuring consistency in analyst decision‑making. Proven experience as a SOC Analyst (L3) in a 24x7 security operations environment. You will be responsible for analyzing and responding to high‑severity security events, optimizing SOC processe

Remote Jobs seeks an experienced Security Analyst to monitor and respond to security events in our network.

Alumni Ventures is seeking a Senior GRC Analyst to operate and mature governance, risk, compliance, and audit readiness programs. Ideal candidates have 5+ years in GRC and experience with SOC 2 audits.

Itlearn360 is looking for a skilled SOC Analyst (Tier 1/2/3) to join our team in Jersey City, NJ.

Senior SOC Analyst/Engineer (Tier 3). We combine cutting‑edge tools with a collaborative, client‑focused culture to deliver trusted managed security services — and now we’re looking for a Tier 3 Senior SOC Analyst/Engineer to join us. We’re a remote‑first SOC that values collaboration, k

This is a flexible remote position allowing professionals from several countries to apply.

Concept Plus is seeking a Senior SOC Analyst to serve as a key member of the Enterprise Cybersecurity Operations Support Team, responsible for safeguarding mission critical information systems and sensitive data. The Senior Analyst leads complex investigations, refines SOC processes, advises enginee

Weiatech, LLC is seeking a SOC Tier 1 Analyst to act as the first line of defense within the Security Operations Center.

ArdentMC is seeking a Security Operations Center (SOC) Analyst for a remote position to support 24x7 security monitoring and incident response activities. The successful candidate will have at least 4 years of experience in a SOC role and a Bachelor’s degree in Cybersecurity or a related field.

Concept Plus is seeking a SOC Analyst to support the Enterprise Cybersecurity Operations Support Team by performing foundational monitoring, analysis, and incident reporting activities. Support incident response activities by gathering data, documenting observations, and preparing reports for senior

Atmosera is looking for a GRC Analyst to provide day-to-day Governance, Risk, and Compliance services as part of our Managed GRC offering. The ideal candidate should have a minimum of 2 years of experience in GRC and be familiar with security compliance frameworks such as NIST and SOC 2.

Security Operations Analyst (AI Training) About The Role We're partnering with leading AI research labs to build the next generation of security-focused AI systems. SOC, incident response, or security operations roles. As a Security Operations Analyst, your real-world SOC experience will directly sh

Get AI-powered advice on this job and more exclusive features. This range is provided by Insight Global. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more. Base pay range $65.00/hr - $75.00/hr Direct message the job poster from Insight Global Title: Senior Information Security Analyst Location: 100% Remote Pay Rate: $70-$75/hr Key Responsibilities: Conduct comprehensive audits of enterprise systems, applications, and infrastructure to ensure compliance with internal policies and external standards (e.g., ISO 27001, NIST, SOC 2). Identify security gaps and recommend remediation strategies to mitigate risks. Collaborate with IT, DevOps, and business units to implement security controls and best practices. Lead risk assessments and threat modeling exercises for new and existing systems. Monitor and analyze security events, incidents, and vulnerabilities across the enterprise. Prepare detailed audit reports, risk assessments, and executive summaries for stakeholders. Support internal and external audits, including evidence collection and control validation. Stay current with emerging threats, vulnerabilities, and regulatory changes. Mentor junior analysts and contribute to the development of security policies and procedures. Required Skills and Qualifications: Bachelor’s degree in information security, Computer Science, or a related field (or equivalent experience). 5+ years of experience in information security, with at least 2 years in an enterprise environment. Proven experience conducting audits and assessments against standards such as ISO 27001, NIST 800-53, CIS, or SOC 2. Strong understanding of enterprise IT systems, multi-cloud platforms (Azure, etc.), and network security. Experience working with any county/state/federal government engagements Excellent analytical, communication, and documentation skills. Preferred Qualifications: Professional certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor. Experience with regulatory compliance (e.g., GDPR, HIPAA, PCI-DSS). Knowledge of secure software development lifecycle (SDLC) and DevSecOps practices. Benefits packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law Seniority level Seniority level Mid-Senior level Employment type Employment type Contract Job function Job function Information Technology Industries Government Administration Referrals increase your chances of interviewing at Insight Global by 2x Inferred from the description for this job Medical insurance Vision insurance 401(k) Get notified about new Information Security Analyst jobs in United States . West Virginia, United States $100,000.00-$175,000.00 2 weeks ago Information Security Engineer Sr. Manager Deployable Industrial Security Analyst - GUAM United States $67,200.00-$100,800.00 23 hours ago Illinois, United States $100,000.00-$175,000.00 2 weeks ago United States $121,000.00-$140,000.00 2 weeks ago AWS Security Engineer, Information System Security Officer (ISSO) United States $80,000.00-$128,000.00 2 weeks ago Business Process Analyst (ITSM - Infrastructure/Security Projects) Massachusetts, United States $70.00-$85.00 2 weeks ago Lead Security Analyst, Policy Controls & Risk Remediation Columbus, OH $155,000.00-$155,000.00 1 week ago Texas, United States $60.00-$65.00 1 week ago Arlington, VA $85,000.00-$145,000.00 3 weeks ago United States $119,800.00-$258,000.00 4 days ago New York, United States $100,000.00-$175,000.00 2 weeks ago Workday Security and Configuration Analyst New York, NY $95,000.00-$140,000.00 5 days ago Missouri, United States $100,000.00-$175,000.00 2 weeks ago Arlington, VA $80,000.00-$94,000.00 6 days ago Business Analyst, Identity & Security Access Mgmt Radnor, PA $79,601.00-$145,100.00 5 days ago Security Assessor (Top Secret Clearance) New Jersey, United States $110,800.00-$155,000.00 1 week ago New Jersey, United States $100,000.00-$175,000.00 2 weeks ago Georgia, United States $100,000.00-$175,000.00 2 weeks ago Platform Professional Services Consultant (Remote) New York, NY $80,000.00-$130,000.00 2 weeks ago United States $125,000.00-$135,000.00 1 day ago We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr

Framework Ventures is looking for a SOC Analyst (Level 1) to monitor and triage security alerts in a cloud-first trading environment. The successful candidate will have 0-2 years experience in security monitoring or IT operations, with knowledge of networking and security fundamentals. This role sui

Remote Jobs is looking for a Senior SOC Analyst/Lead who will work remotely and provide expertise in monitoring and incident response. The ideal candidate has extensive experience in cybersecurity operations and has led teams in a Security Operation Center (SOC).

Location U.S Remote Employment Type Full time Department Engineering Team & Role As a Senior GRC Analyst at Benepass, you will help operate and mature the governance, risk, compliance, audit readiness, and customer assurance programs that support our business, customers, and employees. You will work across security policies, internal controls, audit evidence, risk tracking, security questionnaires, and compliance operations. Reporting to the Head of Infosec & GRC, you will be a key individual contributor on a lean security team. You will partner closely with Security, Engineering, IT, People, Legal, Finance, Sales, Customer Success, and Product to make our security and compliance programs clear, practical, and reliable. You are detail-oriented, organized, and pragmatic. You know how to bring structure to ambiguity, communicate clearly with technical and non-technical stakeholders, and balance compliance rigor with the speed of a growing startup. Role Location & Travel This remote role is based in the United States or Canada. You will be expected to attend company-wide on-site events three to four times per year, as well as occasional on-site office travel as necessary. What You'll Do Governance & Policy: Maintain and improve information security policies, standards, procedures, control documentation, and related governance materials. Control Mapping: Help map policies and controls to frameworks such as SOC 2, ISO 27001/27002, HITRUST, NIST CSF 2.0, and other customer, regulatory, or security requirements. Policy Operations: Support policy exceptions, risk acceptances, remediation tracking, control owner follow-ups, and recurring governance workflows. Compliance & Audit Readiness: Support SOC 2, ISO 27001, and HITRUST readiness, audit preparation, evidence collection, auditor coordination, and audit response management. Control Testing: Maintain recurring evidence-gathering and control testing workflows, helping ensure controls operate consistently across the business. Findings & Remediation: Track audit findings, control gaps, remediation plans, owners, due dates, and closure evidence. Risk Management: Support risk assessments, control gap assessments, internal reviews, and maintenance of the risk register. Business Communication: Translate technical and security risks into clear business language, including mitigations, ownership, timelines, and residual risk. Customer Assurance: Own or support customer security questionnaires, RFP security sections, due diligence requests, and trust or compliance documentation. Response Libraries: Maintain reusable questionnaire content, approved responses, compliance artifacts, and customer-facing assurance materials. Security Awareness: Support employee security awareness programs and create clear internal guidance for policies, controls, and compliance responsibilities. Vendor Risk: Support vendor security reviews, third-party risk assessments, remediation tracking, risk acceptance documentation, and vendor compliance evidence. Tooling & Process Improvement: Use GRC platforms such as Vanta, Drata, Thoropass, Secureframe, or similar tools to improve evidence collection, control monitoring, task tracking, reporting, and repeatable compliance operations. What We're Looking For 5+ years of experience in GRC, information security compliance, IT audit, risk management, security assurance, or a closely related field. Hands-on experience supporting SOC 2 audits and readiness activities. Working knowledge of ISO 27001/27002, HITRUST, NIST CSF, or similar security and compliance frameworks. Experience maintaining security policies, controls, control narratives, evidence repositories, and audit documentation. Experience supporting internal or external audits, including evidence collection, auditor coordination, control owner follow-up, and remediation tracking. Strong written communication skills, with the ability to produce clear policies, questionnaire responses, process documentation, and stakeholder updates. Excellent attention to detail and project management discipline. Experience responding to customer security questionnaires, RFP security sections, or due diligence requests. Familiarity with GRC, compliance automation, or audit management tools. Experience in SaaS, fintech, benefits, healthcare, or other regulated environments. Comfort working in a startup or fast-moving environment where processes need to be mature enough to scale without creating unnecessary friction. Ability to work with both technical and non-technical teams and communicate security and compliance expectations clearly. Nice-to-Haves Certifications such as CISA, CISM, CRISC, HITRUST CCSFP, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or Security+. Experience supporting HITRUST readiness or validated assessments. Experience with vendor risk management or third-party security assessments. Experience supporting HIPAA, PCI DSS, GDPR, or other privacy and security frameworks. Experience at a startup or high-growth technology company. Familiarity with customer trust centers, security assurance portals, or reusable security response libraries. Compensation $130,000-160,000 + Equity Range(s) is subject to change. Benepass takes a number of factors into account when determining individual starting pay, including market comparables, interview performance, peer compensation, and years of experience. What We Offer 95% coverage of medical, dental, and vision Fantastic benefits, including: $250 WFH setup (one time) $500/year Learning & Development Benefit $150/month cell phone + internet $100/month Wellness $100/month Co-working and Commuter Benefit We offer several team onsites a year Flexible PTO At Benepass, we are working towards reimagining how companies take care of their people. We are committed to creating an inclusive environment for all our employees and are seeking to build a team that reflects the diversity of the people we hope to serve with our revolutionary products. Benepass is proud to be an equal-opportunity employer. #J-18808-Ljbffr

Hyland is seeking a Senior Cyber Security Analyst (SOC) responsible for maintaining a secure computing environment. The ideal candidate will possess significant experience in IT security administration, strong communication skills, and relevant certifications. This position is fully remote and offer

Role Summary As a SOC Analyst (Level 1), you are the first line of defense for monitoring, triaging, and escalating security alerts across Keyrock’s cloud-first, high-availability trading environment. What We’re Looking For (Minimum Qualifications) 0–2 years in a SOC / security monitoring / IT

Newspaper WordPress is offering entry-level remote cybersecurity freelance opportunities in the USA.

Exceptional executive presence, with strong verbal and written communication skills to engage with stakeholders from the SOC analyst to the CISO. Security Operations Center (SOC) tooling, processes, and workflows. Principal Consultant For Soc Transformation & Xsiam Deployment.