Remote Cybersecurity Analyst: SOC 2 & GRC

Cisive Inc.; United States; Remote; USD 90,000 - 150,000; Full time

Job summary

Cisive Inc. is seeking an Information Security Analyst for a fully remote role open to candidates in India. The position emphasizes security operations, risk and compliance, and cross-functional collaboration with IT and engineering teams.

The ideal candidate has 5–8 years of information security experience, hands-on SIEM and vulnerability management skills, and familiarity with SOC 2 and NIST CSF frameworks. Strong communication and independent work能力 are essential.

Qualifications

• 5–8 years of experience in information security.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or equivalent.
• Working knowledge of vulnerability management tools such as Tenable Nessus, Tenable.io, or Qualys.
• Understanding of SOC 2 Trust Services Criteria and the NIST Cybersecurity Framework.
• Familiarity with MITRE ATT&CK is an advantage.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to work independently and collaboratively in a cross-functional environment.
• Excellent written and verbal communication skills.

Responsibilities

• Security Operations & Tooling: monitor, tune, triage alerts across SIEM platforms and manage vulnerability lifecycle.
• Governance, Risk & Compliance (GRC): support SOC 2 Type II activities and map controls to NIST CSF requirements.
• Collaboration & Communication: report security metrics and guide stakeholders on security practices.

Skills

Security operations

SOC 2

NIST CSF

Threat detection

Analytical skills

Communication

Independent work

Cross-functional collaboration

Education

CompTIA Security+

CompTIA CySA+

CEH

CISM

Tools

Splunk

Microsoft Sentinel

Tenable Nessus

Tenable.io

Qualys

Job description

Cisive Inc. is seeking an Information Security Analyst for a fully remote role open to candidates in India. The position emphasizes security operations, risk and compliance, and cross-functional collaboration with IT and engineering teams.

The ideal candidate has 5–8 years of information security experience, hands-on SIEM and vulnerability management skills, and familiarity with SOC 2 and NIST CSF frameworks. Strong communication and independent work能力 are essential.