Information Security Analyst

Remote Jobs; Atlanta (GA); On-site; USD 90,000 - 140,000; Full time

Job summary

PlayerZero is seeking a Security Operations and Compliance professional to own day-to-day security administration, access governance, and audit readiness across SOC 2, HIPAA, and ISO-like frameworks.

You will administer Vanta, coordinate control owners and external assessors, and drive remediation with Engineering and SRE. This hands-on role translates security strategy into repeatable operations and clear leadership visibility.

Qualifications

• Experience in security analysis, security administration, or security compliance operations within software/cloud environments.
• Hands-on experience administering identity and access controls, endpoint security, or related tooling.
• Experience preparing for audits or assessments, coordinating evidence across teams, and tracking findings through remediation.
• Understanding of evaluating control effectiveness and gap analysis between policy and practice.
• Familiarity with SOC 2 and regulatory requirements such as HIPAA, ISO, or NIST.
• Ability to investigate findings, assess urgency and impact, and coordinate corrective actions.
• Clear writing and strong organizational skills for accurate documentation and deadlines.
• Ownership and follow-through to drive cross-functional work to closure.

Responsibilities

• Administer security controls across identity, endpoint, and business systems; manage gaps and exceptions.
• Coordinate access reviews and verify least-privilege alignment for onboarding/changes/offboarding.
• Maintain audit readiness: calendar, evidence, auditor requests, and submission quality.
• Administer compliance tooling, mappings, policies, and evidence; keep records aligned with operations.
• Review security findings, prioritize with owners, and track remediation to closure.
• Support FedRAMP readiness by mapping requirements and coordinating remediation with teams.
• Prepare accurate customer security questionnaires and assist with third-party risk reviews.
• Improve security operations by building repeatable workflows and automating evidence collection.

Skills

Security analysis

Security administration

Security compliance ops

Identity and access controls

Audits and assessments

Documentation

Independent execution

Writing & organization

Tools

Vanta

AWS

SOC 2

NIST SP 800-53

Job description

About this job

About PlayerZero

Building great software takes more than writing code. It takes teams working together and too often, the information they need is scattered across tools, conversations, and systems.

PlayerZero is an AI platform that connects work across enterprise Support, Engineering, Product, QA, and SRE teams, helping them resolve issues faster, improve software quality, and plan what to build next.

At its core is our Engineering World Model: a living understanding of a company's software, how it runs, and the people and decisions behind it. By connecting codebases, tickets, production telemetry, and the conversations that shape the work, our model links what software is intended to do with how it actually behaves in production. and learns from where the two diverge.

Our agents (we call them Players:) use that context to take on work across the software lifecycle. They learn from each outcome, earning trust and taking on more responsibility over time.

We're building a future where AI plays an active role in how teams plan, build, and run software. We're looking for people across disciplines to help shapee.

About the role

You’ll own the day-to-day execution of PlayerZero’s security administration and compliance operations. You’ll maintain security controls, investigate gaps, coordinate remediation, and keep our audit programs organized and moving.

Audit readiness is a central responsibility. You’ll administer Vanta, coordinate internal control owners and external assessors, and prepare for SOC 2 audits, HIPAA-related assessments, and ISO 42001 audits. You’ll also help build readiness for FedRAMP as a new area of investment.

This is a hands-on role combining security operations, analysis, and audit coordination. Leadership will set security strategy and priorities; you’ll translate those into consistent execution, surface risks, and follow issues through resolution. You’ll work closely with Engineering, SRE, and business teams, with internal IT responsibilities focused on security-related access and configuration.

What you will do

• Administer security controls. Maintain security configurations across identity, endpoint, and business systems, including MFA, access policies, and device compliance. Investigate exceptions and address gaps within your scope.
• Manage access governance. Coordinate access reviews, evaluate permissions against least-privilege expectations, and verify that onboarding, role changes, and offboarding meet security requirements.
• Lead audit readiness and coordination. Maintain the audit calendar, organize evidence, coordinate auditor requests, and prepare internal owners for assessments. Check submissions for accuracy and completeness.
• Own compliance tooling and documentation. Administer Vanta, maintain control mappings, policies, procedures, and evidence, and keep records aligned with how the company operates.
• Analyze findings and drive remediation. Review security alerts, vulnerability findings, and control exceptions. Investigate impact, prioritize with technical owners, and track corrective actions through validation and closure.
• Support FedRAMP readiness. Help map requirements to existing controls, identify gaps, maintain security documentation, and coordinate remediation with Engineering, SRE, and external specialists.
• Support security reviews and response. Prepare accurate customer security questionnaire responses, coordinate third-party risk reviews, and assist with incident investigation, documentation, and follow-up.
• Improve security operations. Build repeatable workflows, automate evidence collection and routine checks, and make outstanding risks and requirements visible to leadership.

What you bring

• Experience in security analysis, security administration, or security compliance operations within a software or cloud-based environment.
• Hands-on experience administering identity and access controls, endpoint security, or related security tooling.
• Experience preparing for audits or assessments, coordinating evidence across teams, and tracking findings through remediation.
• An understanding of how to evaluate whether a control is operating effectively and identify gaps between documented policy and actual practice.
• Familiarity with SOC 2 and experience working with control frameworks or regulatory requirements such as HIPAA, ISO standards, or NIST.
• The ability to investigate security findings, distinguish urgency from impact, and work with technical owners on practical corrective actions.
• Clear writing and strong organization, with the ability to maintain accurate documentation and manage multiple deadlines.
• Ownership and follow-through: you can execute independently, elevate decisions appropriately, and keep cross-functional work moving.

Nice to have

• Experience supporting FedRAMP readiness, assessments, or ongoing monitoring, including familiarity with NIST SP 800-53.
• Experience administering Vanta or a comparable compliance platform.
• Familiarity with AWS security controls and cloud environments.
• Exposure to ISO 42001 or AI governance programs.
• Scripting or automation experience that improves security operations or evidence collection.

What success looks like

Security controls operate consistently, access reviews and corrective actions stay on schedule, and audit evidence is accurate and current. Auditors and internal owners have a clear process for working together, findings reach resolution, and leadership has useful visibility into risk. FedRAMP readiness progresses through documented requirements, clear ownership, and completed actions.

Why PlayerZero

PlayerZero is an early leader in AI-powered production engineering, defining how enterprises use AI to understand, improve, and operate their software.

We're a small team with meaningful problems to solve and room for each person to make their mark. Whether you're building the technology, working with customers, or growing the business, you'll help shape the product, the company, and what customers expect from this emerging category.

If you're excited by work where the answers aren't all written yet, and want a hand in writing them, you'll fit right in.