SOC 2/ISO 27001 Cybersecurity Compliance Analyst (Onsite)

Crawford Thomas Recruiting; Orlando (FL); On-site; USD 80,000 - 125,000; Full time

Job summary

Crawford Thomas Recruiting is seeking a Cybersecurity/GRC Compliance Analyst for an onsite role in Orlando, FL. The ideal candidate has 5+ years in cybersecurity compliance and will support audits, control testing, risk assessments, and remediation across multiple frameworks.

The position requires strong collaboration with IT, Security, and Engineering teams, and experience with vendor risk, SSPs, and continuous monitoring is a plus. This is a full-time, direct-hire opportunity.

Qualifications

• 5+ years in cybersecurity compliance, IT audit, risk, information security, or regulatory compliance.
• Experience with SOC 2 and ISO 27001.
• Exposure to NIST 800-171, FedRAMP, HIPAA, PCI DSS, DoD, GDPR, or similar frameworks.
• Experience supporting audits, identifying control gaps, and driving remediation.
• Experience with vendor risk, control mapping, SSPs, POA&Ms, or continuous monitoring.
• Strong communication skills with both technical and non-technical teams.
• Bachelor’s degree or equivalent professional experience.
• Stable work history with meaningful tenure in previous roles.

Responsibilities

• Support SOC 2, ISO 27001, NIST 800-171, FedRAMP, and other compliance initiatives.
• Coordinate audit evidence, documentation, control validation, and auditor requests.
• Test controls, identify compliance gaps, and track remediation.
• Conduct risk assessments and maintain audit-ready policies and documentation.
• Partner with IT, Security, and Engineering on technical security controls.
• Support vendor risk reviews and customer compliance requests.

Skills

Cybersecurity compliance

IT audit

Risk assessment

Regulatory compliance

SOC 2

ISO 27001

Vendor risk

Control mapping

POA&Ms

Continuous monitoring

Communication

Education

Bachelor's degree or equivalent

Job description

Crawford Thomas Recruiting is seeking a Cybersecurity/GRC Compliance Analyst for an onsite role in Orlando, FL. The ideal candidate has 5+ years in cybersecurity compliance and will support audits, control testing, risk assessments, and remediation across multiple frameworks.

The position requires strong collaboration with IT, Security, and Engineering teams, and experience with vendor risk, SSPs, and continuous monitoring is a plus. This is a full-time, direct-hire opportunity.