Remote Information Security Analyst — SOC & Compliance Focus

ACES Quality Management; Denver (CO); Remote; USD 95.000 - 135.000; Vollzeit

Zusammenfassung

ACES Quality Management is seeking an Information Security Analyst to own day-to-day security operations and support the Vendor Management team, auditors, and cross-functional partners. You will administer security tooling, manage vulnerabilities, and drive evidence-based security improvements.

The role emphasizes hands-on security work with growth toward application security and policy while supporting SOC 2 controls and regulatory compliance in a fast-paced, remote team environment.

Qualifikationen

• Solid foundation in information security principles, risk assessment, and compliance.
• Familiarity with SOC 2 and data protection laws relevant to financial services.
• Ability to translate findings into practical recommendations for technical and non-technical audiences.
• Experience administering security tooling in production environments.
• Security credentials or commitment to earn one within six months.

Aufgaben

• Administers security and compliance platforms (Veracode, StackHawk, AlertLogic, Secureframe, KnowBe4, Defender/Intune).
• Tracks vulnerability remediation and monitors CVEs/KEV with remediation actions.
• Runs penetration-testing logistics including scoping, test-day prep, findings tracking, and retests.
• Analyses findings and proposes evidence-based changes to strengthen security posture.
• Responds to auditor evidence requests and supports SOC 2 Type 2 audits.
• Collaborates with Technology, Engineering, and Vendor Management to embed security in systems.
• Acts as first responder to vendor security questionnaires and due-diligence requests.

Kenntnisse

Information security principles

Risk assessment

Compliance knowledge

SOC 2 familiarity

Written and verbal communication

Ausbildung

Bachelor's degree in Information Security/CS/IT

Tools

Veracode

StackHawk

Secureframe

KnowBe4

Jobbeschreibung

ACES Quality Management is seeking an Information Security Analyst to own day-to-day security operations and support the Vendor Management team, auditors, and cross-functional partners. You will administer security tooling, manage vulnerabilities, and drive evidence-based security improvements.

The role emphasizes hands-on security work with growth toward application security and policy while supporting SOC 2 controls and regulatory compliance in a fast-paced, remote team environment.