Security Compliance Analyst: SOC/NIST & Audits

Vestwell; Austin (TX); Hybrid; USD 90,000 - 105,000; Full time

Benefits offered by this job

Bonus pool

New hire equity

Hybrid in-office

401(k)

Job summary

Vestwell’s Corporate Information Technology team is seeking an experienced, meticulous Information Security compliance analyst to monitor and improve our compliance systems. You will review SOC controls, automate compliance tasks, respond to RFPs, and build a knowledge library to speed up responses.

You’ll collaborate with Security, Engineering, Legal, and Compliance to enforce best practices and policies. The role combines governance, risk, and compliance activities across our growing

Qualifications

• Experience with SOC, ISO, and other audits.
• Experience responding to RFPs.
• Experience working with cross-teams to implement new compliance processes.
• Vendor management, review experience.

Responsibilities

• Manage cybersecurity risk processes within the GRC solution.
• Manage cybersecurity compliance obligations across regulatory and customer requirements (NIST, ISO, SOC 1&2).
• Coordinate cybersecurity audits, assessments, evidence requests, and remediation tracking with Legal, Compliance, IT and business leaders.
• Support risk management for customers, vendors, suppliers, and subcontractors.

Skills

SOC audits

ISO

RFP responses

Cross-team collaboration

Vendor management

Tools

CrowdStrike

Vanta

Responsive

Job description

Vestwell’s Corporate Information Technology team is seeking an experienced, meticulous Information Security compliance analyst to monitor and improve our compliance systems. You will review SOC controls, automate compliance tasks, respond to RFPs, and build a knowledge library to speed up responses.

You’ll collaborate with Security, Engineering, Legal, and Compliance to enforce best practices and policies. The role combines governance, risk, and compliance activities across our growing