Security Risk & Compliance Analyst

Audax Group; Boston (MA); On-site; USD 90,000 - 130,000; Full time

Job summary

Audax Group in Boston, MA seeks an Information Security Risk Analyst to drive the firm’s risk program across vendors, apps and internal systems. You will own risk assessments, document scoring, and support audit readiness with SOC 1/2 evidence collection and DDQs.

Join a collaborative team partnering with IT, Legal, Compliance and IR to translate technical controls into business risk narratives and enable secure, compliant operations.

Qualifications

• Experience applying NIST CSF, ISO 27001 and SOC 1/2 controls.
• Ability to perform risk assessments for vendors, applications and internal systems.
• Proven track record coordinating audits and DDQs.

Responsibilities

• Perform independent information security risk assessments for vendors, applications, systems and processes.
• Lead SOC 1 IT control evidence gathering across units.
• Coordinate audit requests and evidence collection.
• Develop risk narratives translating technical controls to business impact.
• Maintain risk registers and remediation tracking.
• Support BIA inputs and business continuity activities.

Skills

Risk frameworks

Third-party risk

Application risk

Control mapping

Audit coordination

SOC 1/2 controls

DDQs handling

Documentation

Business continuity

Threat intel basics

Tools

SIEM

EDR

Vulnerability scanning

Job description

Audax Group in Boston, MA seeks an Information Security Risk Analyst to drive the firm’s risk program across vendors, apps and internal systems. You will own risk assessments, document scoring, and support audit readiness with SOC 1/2 evidence collection and DDQs.

Join a collaborative team partnering with IT, Legal, Compliance and IR to translate technical controls into business risk narratives and enable secure, compliant operations.