Remote SOC & Compliance Analyst (GRC)

Embedded Shishya; United States; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Remote work

Hardware provided

Internet allowance

Education allowances

Bonuses

Growth opportunities

Flexible schedule

Work-life balance

Job summary

SyncEzy is a remote-savvy company seeking a hands-on Information Security & Compliance Analyst (GRC) to own day-to-day compliance operations and keep controls audit-ready across SOC 2, ISO 27001 and Cyber Essentials.

The role collaborates with Engineering, DevOps and IT, requiring 2–4 years in GRC, strong documentation skills, and the ability to translate requirements into practical actions for a SaaS environment.

Qualifications

• 2–4 years of experience in GRC or information security compliance.
• Practical exposure to SOC 2 or ISO 27001; familiarity with Cyber Essentials preferred.
• Experience collecting, reviewing and organizing audit evidence and coordinating with control owners.
• Strong documentation and policy-writing skills with attention to consistency and audibility.
• Understanding of cloud environments, IAM, endpoint security, vulnerability management, logging, backups and change management.
• Ability to read technical evidence and work with both technical and non-technical stakeholders.

Responsibilities

• Maintain year-round readiness for SOC 2, ISO 27001 and Cyber Essentials.
• Own routine compliance administration, evidence collection and control monitoring.
• Translate compliance requirements into practical actions for Engineering, DevOps and IT teams.
• Identify gaps, track remediation to closure and maintain clear documentation.

Skills

GRC

Information security

Audit evidence

Policy writing

Cloud security

IAM / Access management

Vulnerability management

Tools

Vanta

Drata

Sprinto

Job description

SyncEzy is a remote-savvy company seeking a hands-on Information Security & Compliance Analyst (GRC) to own day-to-day compliance operations and keep controls audit-ready across SOC 2, ISO 27001 and Cyber Essentials.

The role collaborates with Engineering, DevOps and IT, requiring 2–4 years in GRC, strong documentation skills, and the ability to translate requirements into practical actions for a SaaS environment.