Security Compliance Analyst

21Tech; United States; Remote; USD 99,000 - 142,000; Full time

Job summary

21Tech is seeking a Security Compliance Analyst for a remote six-month contract in the United States. The role provides hands-on administrative support to keep reviews, audits, and customer security requests moving on schedule.

You will work with program owners and cross-functional stakeholders under a defined intake process. The position emphasizes strong written communication, program management, and coordination across teams; familiarity with PCI DSS, SOC 1/SOC 2, or ISO 27001 is preferred

Qualifications

• Experience coordinating security compliance activities, audits, compliance operations, or customer security questionnaires.
• Strong written communication skills, discretion with confidential information, program and project management skills.
• Familiarity with PCI DSS, SOC 1/SOC 2, and/or ISO 27001 preferred.
• Reliable execution and sound judgment for escalations in cross-functional teams.

Responsibilities

• Third-Party Security Questionnaire Intake and Response: manage requests, draft responses, and coordinate artifacts with DRIs.
• Quarterly Security Operational Reviews: maintain calendars, trackers, and evidence; compile review packets.
• Audit and Penetration Testing Logistics: schedule audits, coordinate vendors, track evidence and deadlines.
• Operational Reporting and Handoff: produce weekly summaries and document playbooks for handoff.

Skills

Security compliance coordination

Program management

Written communication

Cross-functional coordination

Security knowledge

Escalation handling

Education

BS/MS degree or equivalent relevant experience

Job description

Our client, a global technology and financial services company, is seeking a Security Compliance Analyst to provide hands-on administrative and program management support for Security Compliance for approximately 6 months, with the possibility of an extension based on business needs or increased workload. The person will keep recurring reviews, audits, testing engagements, and customer security requests moving according to schedule so Security Compliance specialists can focus on assessment, technical interpretation, and remediation efforts. The analyst will work with Security Compliance program owners and relevant cross-functional stakeholders under a defined intake and escalation process.

This is a remote 6-month contract position. Candidates must be authorized to work in the United States. No H-1B visa sponsorship available. Hourly rate: $87.54. No C2C.

Responsibilities

Third-Party Security Questionnaire Intake and Response: Monitor assigned customer security questionnaires, document-request queues, and relevant channel requests; acknowledge and categorize requests, identify DRIs and due dates, and route requesters to approved self-service materials where appropriate. Use the team’s questionnaire tool to generate draft responses, then validate them for completeness, accuracy, and consistency with approved security documentation. Track DRI input and assemble approved artifacts. Initially, a Security Compliance employee will review the completed responses and approve delivery. After training and demonstrated accuracy, the contractor may independently review and deliver routine questionnaires within an agreed-upon, documented scope. Escalate bespoke questions, uncertain or outdated answers, new security assertions, non-public disclosures, blockers, and deadlines to the appropriate Security Compliance employee or team DRI before delivery.

Quarterly Security Operational Reviews: Maintain the quarter-by-quarter calendar, control and evidence request lists, templates, status trackers, evidence links, and follow-up logs. Collect evidence from control owners, identify missing or late submissions, prepare review packets, draft administrative portions of reports, and track Security Compliance/PCI DRI reviews and approvals. The Security Compliance reviewer remains responsible for examining evidence, documenting substantive conclusions, and verifying PCI DSS business-as-usual requirements.

Audit and Penetration Testing Logistics: Maintain audit and testing calendars, evidence and request trackers, and action logs. Schedule walkthroughs from program-owner-approved attendee and scope lists. Coordinate vendor meetings, access requests through approved channels, evidence deadlines, and follow-ups. Maintain a clear record of what was requested, provided, reviewed, and remains outstanding. Program owners retain responsibility for audit scope, firm selection, SOW approval, findings, and responses.

Operational Reporting and Handoff: Produce a concise weekly summary of open requests, aged items, upcoming milestones, unresolved decisions, and escalations. Document repeatable playbooks, templates, owners, and evidence locations to enable a seamless handoff at the end of the contract.

Skills

• Experience coordinating security compliance activities, audits, compliance operations, or customer security questionnaires.
• Strong written communication skills, discretion when handling confidential information, strong program and project management skills, general security knowledge, organized tracking and follow-through, and the ability to coordinate across multiple teams and external parties.
• Familiarity with PCI DSS, SOC 1/SOC 2, and/or ISO 27001, audit evidence, and security questionnaires is preferred but not required.
• The role requires reliable execution, sound judgment regarding escalations, and coordination with employee owners for compliance-related determinations.

Decision and Access Boundaries

Security Compliance employees own control interpretation, evidence acceptance, substantive review findings, new customer-facing security assertions, non-routine disclosure decisions, and attestations. Following training and authorization, the contractor may review and deliver routine questionnaire responses within the agreed scope. Employee DRIs review exceptions before delivery. Client employees own purchase orders and vendor invoice approvals.

BS/MS degree or equivalent relevant experience.