Security Compliance Lead - SOC 2, ISO 27001 (Remote)

The Phoenix Group®; New York (NY); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

Remote work options available

Professional development stipend

Job summary

The Phoenix Group® is seeking an Information Security Engineer to guide clients through complex security programs and implement controls in cloud, endpoint, and identity environments.

You will lead SOC 2, ISO 27001, and NIST CSF audits, develop policies, manage Vanta/Drata/Secureframe, and harden posture across Google Workspace, Microsoft 365, AWS/Azure/GCP, with EDR/MDM deployment on Mac and Windows.

Qualifications

• 3 to 5+ years of experience in information security or IT with a focus on security operations and compliance.
• Proven experience leading full security audits using Vanta, Drata, or Secureframe.
• Hands-on administration of EDR and MDM tools.
• Strong IAM knowledge and cloud security practices for Google Workspace, Microsoft 365, and public clouds.
• Experience managing vulnerability programs, incident response, and security remediation.

Responsibilities

• Lead clients through SOC 2, ISO 27001, and NIST CSF audits, including readiness assessments and evidence collection.
• Develop and maintain security policies aligned with NIST, GDPR, CCPA, and SEC regulations.
• Oversee compliance programs using automated tools like Vanta, Drata, Secureframe.
• Evaluate vendors and AI tools for security risks and optimize TPRM.
• Deploy, configure, and manage EDR and MDM across Mac and Windows.
• Harden security posture of cloud platforms such as Google Workspace and Microsoft 365.
• Monitor, triage, and respond to security alerts; lead incident response.
• Manage vulnerability scans, conduct pen testing, and administer SIEM tools.
• Conduct security awareness training and phishing simulations.
• Scope and lead security projects and document SOPs/Playbooks.

Skills

Information security

Cybersecurity

Security operations

Compliance programs

Tools

SentinelOne

Jamf

Mosyle

Intune

Okta

Entra ID

MFA solutions

Google Workspace

Microsoft 365

AWS

Azure

GCP

Qualys

Nessus

Splunk

Elastic

Vanta

Drata

Secureframe

Job description

The Phoenix Group® is seeking an Information Security Engineer to guide clients through complex security programs and implement controls in cloud, endpoint, and identity environments.

You will lead SOC 2, ISO 27001, and NIST CSF audits, develop policies, manage Vanta/Drata/Secureframe, and harden posture across Google Workspace, Microsoft 365, AWS/Azure/GCP, with EDR/MDM deployment on Mac and Windows.