SOC 2 Security & Compliance Analyst

ACES Risk Management; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

ACES Quality Management is on a mission to improve quality, confidence, and transparency across the financial services industry. Through our leading quality management platform, we empower clients to strengthen performance and stay ahead of risk.

What sets us apart is our people - an engaged, high‑performing, remote team that shows up for our customers and each other every day. The Information Security Analyst is responsible for the day‑to‑day security of ACES systems and information assets,

Qualifications

• Bachelor’s degree or equivalent in information security, computer science, or related field.
• 3–6 years hands-on information security experience with security responsibility.
• Experience administering security tools in production; familiarity with cloud infra (Azure).
• Experience with vulnerability identification and remediation with cross-functional teams.
• Security certifications or commitment to earn Security+ within six months are desirable.

Responsibilities

• Administers and maintains security and compliance platforms protecting assets and tech infra.
• Tracks vulnerability remediation, monitors new CVEs and KEV, recommends actions.
• Runs penetration-testing logistics: scoping, test-day prep, findings tracking, retests.
• Supports auditor evidence requests and strengthens SOC 2 controls with SME input.
• Collaborates with Engineering, Tech, Operations, and Vendor Management on security matters.
• Maintains documentation of security procedures, configurations, and control evidence.

Skills

Information security principles

Risk assessment

SOC 2 familiarity

Vulnerability remediation

Security tooling

Education

Bachelor’s degree in Information Security or related field

Tools

Veracode

StackHawk

AlertLogic

Secureframe

KnowBe4

Microsoft Defender/Intune

Azure

Job description

ACES Quality Management is on a mission to improve quality, confidence, and transparency across the financial services industry. Through our leading quality management platform, we empower clients to strengthen performance and stay ahead of risk.

What sets us apart is our people - an engaged, high‑performing, remote team that shows up for our customers and each other every day. The Information Security Analyst is responsible for the day‑to‑day security of ACES systems and information assets,