Security & Compliance Analyst — Remote & Growth-Driven

Decisions; Virginia Beach (VA); Hybrid; USD 70,000 - 110,000; Full time

Benefits offered by this job

Remote option

Health benefits

Professional development

Paid time off

Recognition programs

Flexible hours

Job summary

Decisions is seeking an Analyst, Security & Compliance to strengthen our security operations, vulnerability management, and audit programs. You will coordinate with Security, Engineering, IT, HR, and business teams to ensure controls are effective and regulatory requirements are met.

You will manage audit evidence, support SDLC security, and drive improvements across security programs while maintaining strong written and verbal communication with auditors and stakeholders.

Qualifications

• 2+ years of experience in information security, compliance, IT, risk management, or related field.
• Experience supporting external audits such as SOC 2, ISO 27001, PCI DSS, or similar.
• Experience reviewing vulnerability scans and coordinating remediation with technical teams.
• Strong technical aptitude with cloud platforms and security tools.
• Ability to manage multiple priorities and meet deadlines in a fast-paced environment.

Responsibilities

• Own customer security questionnaires from intake through completion, including evidence gathering and secure delivery.
• Manage vulnerability scanning activities and coordinate remediation across products and systems.
• Review security scan results before releases and route high-risk findings appropriately.
• Help maintain strong external security ratings and continuously improve security posture.
• Participate in the incident response program and act as Incident Response Coordinator when needed.
• Investigate phishing attempts and coordinate remediation activities across the organization.
• Conduct phishing simulations and security awareness initiatives.
• Review software, vendor, and AI tool requests for compliance with company policies.
• Maintain and update risk registers, security documentation, and compliance records.
• Partner with Engineering to support secure SDLC requirements.
• Administer security awareness training programs and track completion metrics.
• Support least-privilege access reviews and security governance processes.
• Own and support compliance activities for PCI DSS, SOC 2 Type II, ISO 27001 and future initiatives.
• Gather, review, organize, and manage audit evidence for external and internal audits.
• Communicate with auditors and stakeholders to resolve findings and action items.
• Execute assigned security controls and support internal control testing.
• Serve as backup owner for security and compliance controls.

Skills

Security practices

Vulnerability management

Audit coordination

Documentation

English fluency

Incident response

Phishing awareness

Compliance knowledge

Cloud platforms

Tools

CrowdStrike

Azure

AWS

Splunk

Job description

Decisions is seeking an Analyst, Security & Compliance to strengthen our security operations, vulnerability management, and audit programs. You will coordinate with Security, Engineering, IT, HR, and business teams to ensure controls are effective and regulatory requirements are met.

You will manage audit evidence, support SDLC security, and drive improvements across security programs while maintaining strong written and verbal communication with auditors and stakeholders.