Information Security Analyst (SOC 2 Compliance)

Tevora; Fairfax (VA); On-site; USD 92,000 - 115,000; Full time

Job summary

Tevora is looking for an Information Security Analyst to join their SOC Compliance team. The role includes assessing SOC compliance for major organizations, mentoring junior staff, and developing security documentation. Ideal candidates will have a solid background in information security, strong communication skills, and a passion for problem-solving.

Benefits

Comprehensive benefits including: Medical, Dental, Vision & Basic Life Insurance

Paid Vacations, Sick Time, & Holidays

401 (k) with discretionary company match

Vibrant work culture

Qualifications

• Minimum 2 years in information security or compliance.
• At least 1 year experience in SOC 2 Compliance assessments.
• One IT or auditing certification required.

Responsibilities

• Participate in IT and compliance assessments and audits.
• Lead SOC compliance assessments.
• Communicate project requirements effectively.

Skills

Attention to detail

Communication skills

Problem-solving

Technical expertise

Education

Bachelor’s degree from an accredited 4-year university

Tools

MS Office

Job description

Information Security Analyst (SOC 2 Compliance)

Information Security Analyst (SOC 2 Compliance)

1 month ago Be among the first 25 applicants

This range is provided by Tevora. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$92,400.00/yr - $115,000.00/yr

at Tevora

Irvine, CA or Fairfax, VA

If you haven’t heard of Tevora, it’s because we’ve done our job!

Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you.

What’s the role?

Tevora is seeking an Information Security Analyst to join the SOC Compliance team.

This role on the SOC Compliance team is looking for a passionate individual who has a solid balance between business acumen and technical expertise. Comfortable across various disciplines of information security, this consultant will be responsible for assessing System and Organization Controls (SOC) compliance, for SOC 1 and SOC 2, on a wide variety of client projects for some of the world's largest organizations. Other compliance frameworks this role will work on may include ISO 27001 and PCI as well as GRC support for clients. This role will also provide mentorship to junior team members and participate in ongoing training opportunities.

The successful candidate for this role will be detail-orientated, have a solution-focused attitude, and possess strong written and verbal communication skills.

A day in the life could include:

• Participating in and leading IT and Compliance assessments, audits, gap analyses, and remediation
• Leading and actively contributing to projects in the areas of System and Organization Controls (SOC 1 & SOC 2) Compliance assessments.
• Communicating with project stakeholders to effectively convey the requirements of technical and process improvements
• Supporting various information security compliance projects, such as PCI or ISO gap assessments
• Assisting in the development of customized policies, procedures, controls, disaster recovery plans and other documentation for applications, systems, and infrastructure for our clients
• Managing policy exceptions, including working directly with the teams to document exceptions, and identifying compensating controls and remediation action plans
• Take on additional responsibilities as needed or as new opportunities arise. Proactively support the team with tasks and projects that emerge over time
  
  
  
  

Necessary skills and qualifications:

• Completed minimum 2 years of experience in information security, information technology, business consulting, enterprise risk, or compliance field
• Demonstrated experience in at least 1 year of SOC 2 Compliance assessments
• Hold at least one Auditing, Risk, or IT certification from the following list: CISSP, CISA, CISM, CRISC, ISO Lead Auditor
• Possess knowledge of common IT and security concepts such as firewall management, server management, access control, and authentication
• Ability to connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to offer recommendations as an expert with best practices
• Ability to work independently without detailed guidance
• Proficient in writing executive-level reports and technical documentation
• Proficient in MS Office tools and basic professional acumen.
  
  
  
  

Bonus Points

• Hold a bachelor’s degree from an accredited 4-year university
• Demonstrated experience in at least one other information security compliance assessment (ISO 27001, PCI Level 1, HITRUST)
• Prior or current CPA license
• Commitment to continued learning
  
  
  
  

We’ve got you covered!

• Comprehensive benefits including: Medical, Dental, Vision & Basic Life Insurance
• Paid Vacations, Sick Time, & Holidays
• 401 (k) with discretionary company match
• Vibrant work culture
  
  
  
  

Additional requirements:

• Eligibility to work in the United States
  
  
  
  

EEOC Statement

Tevora is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or other applicable legally protected characteristics.

Seniority level

• Seniority level

  Associate

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Hospitality, Food and Beverage Services, and Retail

Referrals increase your chances of interviewing at Tevora by 2x

Sign in to set job alerts for “Information Security Analyst” roles.

Cloud Security - Information Security Engineer- Remote

Information System Security Manager/Information System Security Engineer

Washington DC-Baltimore Area 2 months ago

Information Systems Security Engineer (ISSE) SME (ISSO/Cybersecurity Architect - SME)

Information Systems Security Manager - Advanced

Information Systems Security Manager - Advanced

Information Systems Security Engineer- ISSE

Washington, DC $90,300.00-$189,600.00 2 months ago

Security Analyst (Adjudicator-Multiple Levels)

Information System Security Officer - Mid

Information System Security Officer - Mid

Network Systems Analyst- DoD SkillBridge Internship

Junior Security Control Assessor with Top Secret

Reston, VA $87,990.00-$120,000.00 1 week ago

Washington, DC $120,000.00-$155,000.00 2 weeks ago

Security Control Assessor (SCA) (TS/SCI)

Information System Security Officer - Senior

Compliance Analyst, Regulatory Compliance, AWS Compliance & Security Assurance

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.