SOC 2-Focused IT & Security Operations Analyst

LCvista, Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health, Dental, and Vision Insurance

Unlimited PTO & Sick/Wellness Hours

Parental leave

Laptop + home-office stipend

Diversity & inclusion

Job summary

LCvista, Inc. is seeking an IT Operations & Security Analyst to own day-to-day security and compliance activities, including SOC 2 Type II operations, policy upkeep, and evidence management. You will work with our CTO, vCISO, MSP, and cross-functional teams to protect systems and data.

The role focuses on safeguarding our Microsoft 365 environment, vendor management, and employee lifecycle, with opportunities to grow security expertise in a collaborative, fast-paced SaaS setting.

Qualifications

• 3+ years of experience in IT operations, IT security, or compliance.
• Hands-on experience supporting SOC 2, ISO 27001, or similar audits.
• Experience completing customer security questionnaires or security reviews.
• A solid technical background, including Microsoft 365 and Entra ID administration.
• Experience managing IT asset and laptop lifecycles; secure disposal.
• Familiarity with security frameworks (NIST CSF, CIS Controls, OWASP).
• Strong organizational skills, attention to detail, and communication abilities.
• Service-oriented mindset and ability to juggle priorities across teams.
• Must be authorized to work in the United States.

Responsibilities

• Run the daily operations of LCvista's security and compliance program; own evidence collection and monitoring.
• Manage vendor and employee lifecycle with MSP and internal teams; ensure SOC 2 controls are maintained.
• Coordinate security training, awareness programs, and annual phishing simulations.
• Lead security reviews with customers; prepare answers and supporting documentation.
• Maintain vendor security documentation and evidence; track findings and remediation.
• Collaborate with CTO, vCISO, and CFOO on security reviews and vendor risk.
• Support incident response activities and participate in tabletop exercises.

Skills

SOC 2

ISO 27001

Microsoft 365

Entra ID administration

Vendor risk management

Security questionnaires

PowerShell

Python

KnowBe4

ControlMap

AWS security

Vanta

Drata

Security awareness

Communication skills

Tools

ControlMap

KnowBe4

Vanta

Drata

Microsoft 365

Entra ID

AWS

PowerShell

Python

n8n/Power Automate

Job description

LCvista, Inc. is seeking an IT Operations & Security Analyst to own day-to-day security and compliance activities, including SOC 2 Type II operations, policy upkeep, and evidence management. You will work with our CTO, vCISO, MSP, and cross-functional teams to protect systems and data.

The role focuses on safeguarding our Microsoft 365 environment, vendor management, and employee lifecycle, with opportunities to grow security expertise in a collaborative, fast-paced SaaS setting.