Remote Information Security Compliance Analyst

Socket.dev; United States; On-site; USD 110,000 - 135,000; Full time

Job summary

Sungrow is seeking an Information Security Compliance Analyst II in the United States to support governance, policy, and control programs across enterprise and product environments. You will collect evidence, validate control effectiveness, and coordinate remediation efforts with cross-functional teams.

This role emphasizes policy generation, evidence management, and continuous compliance activities, requiring strong documentation, analytical, and communication skills to meet regulatory and

Qualifications

• 3+ years of professional experience in cybersecurity or related fields.
• Experience in structured security and high-accountability environments.
• Experience collecting, analyzing, documenting, or reporting evidence.
• Experience implementing and monitoring security controls.
• Familiarity with cybersecurity policies and standards.
• Foundational knowledge of frameworks such as NIST CSF, ISO27001, SOC 2.

Responsibilities

• Implement, validate, and maintain cybersecurity controls across environments.
• Translate requirements into practical operational controls.
• Collect and organize evidence for controls and audits.
• Maintain traceability between requirements, controls, and evidence.
• Support policy development and governance documentation.
• Assist in policy exceptions and remediation tracking.
• Support assessments, audits, and customer due diligence.
• Develop evidence repositories and remediation dashboards.
• Collaborate with cross-functional teams to improve compliance.

Skills

Evidence management

Documentation

Security controls

Risk assessment

Policy governance

Cross-functional communication

Analytical thinking

Compliance knowledge

Audit readiness

Education

Bachelor's degree in Cybersecurity

Tools

GRC software

Job description

Sungrow is seeking an Information Security Compliance Analyst II in the United States to support governance, policy, and control programs across enterprise and product environments. You will collect evidence, validate control effectiveness, and coordinate remediation efforts with cross-functional teams.

This role emphasizes policy generation, evidence management, and continuous compliance activities, requiring strong documentation, analytical, and communication skills to meet regulatory and