Hybrid InfoSec Compliance Analyst (GRC, RFPs & Audits)

Vestwell; Austin (TX); Ibrido; USD 90.000 - 105.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health benefits

Generous time off

401(k) plan

Hybrid work model

Office access NYC/Austin

Descrizione del lavoro

Vestwell, a leading fintech company with offices in New York City and Austin, is seeking an Information Security Compliance Analyst. The role focuses on monitoring and improving our compliance systems, auditing SOC controls, and building automations to streamline RFP responses.

You will collaborate with Security, Engineering, Legal, and Compliance to implement best practices and policies. The position is based in our New York City or Austin office, operating in a hybrid in-office model.

Competenze

• Experience with SOC, ISO, and other audits.
• Experience responding to RFPs.
• Experience working cross-teams to implement new compliance processes.
• Vendor management, review experience.

Mansioni

• Manage cybersecurity risk processes within the GRC solution, including risk registers, findings, vulnerabilities, remediation plans, ownership, escalation, and business acceptance.
• Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements, including NIST, ISO and SOC 1&2, and other applicable standards.
• Coordinate cybersecurity audits, assessments, evidence requests, customer reviews, and remediation tracking in partnership with Legal, Compliance, IT, and business leaders.
• Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires, contract reviews, security expectations, and customer-facing services.

Conoscenze

SOC audits

ISO audits

RFP responses

Cross-functional collaboration

Vendor management

Strumenti

CrowdStrike

Vanta

Responsive

Descrizione del lavoro

Vestwell, a leading fintech company with offices in New York City and Austin, is seeking an Information Security Compliance Analyst. The role focuses on monitoring and improving our compliance systems, auditing SOC controls, and building automations to streamline RFP responses.

You will collaborate with Security, Engineering, Legal, and Compliance to implement best practices and policies. The position is based in our New York City or Austin office, operating in a hybrid in-office model.