SOC 2 Security & Compliance Analyst (Remote)

ACES Quality; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

ACES Quality Management is a remote‑oriented company delivering quality management across the financial services industry. The Information Security Analyst will own day‑to‑day security operations, manage vulnerability programs, and support SOC 2 compliance and audits.

This is a mid‑level, hands‑on role focused on platform administration and security controls rather than policy ownership. You will work with Veracode, StackHawk, Secureframe, and other tooling to strengthen security posture, while

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field or equivalent work experience.
• 3–6 years of hands‑on information security experience at a mid‑level.
• Experience administering security/infrastructure tools in production (config, integrations, access control, troubleshooting).
• Experience with Windows and Microsoft 365 endpoint management (Defender, Intune) and cloud infrastructure (Azure).
• Experience with vulnerability identification and remediation with owning teams.
• Familiarity with data protection regulations in financial services context.
• One current security credential: CompTIA Security+ or equivalent, or commitment to earn within six months.

Responsibilities

• Administers and maintains security and compliance platforms (Veracode, StackHawk, AlertLogic, Secureframe, KnowBe4, Defender/Intune).
• Tracks vulnerabilities and SLAs; monitors CVEs and KEV; recommends remediation actions.
• Runs penetration-testing logistics: scoping, prep, findings tracking, retests.
• Analyzes findings and prepares evidence-based proposals for management.”
• Identifies non-compliant configurations and supports remediation with owning teams.
• Supports SOC 2 controls in Secureframe; assists auditors and provides evidence.
• Reviews MDR alerts and WAF activity; assists incident response with technical analysis.
• Maintains documentation of security procedures and platform configurations.
• Collaborates with Technology, Engineering, Operations; embeds security requirements into systems.

Skills

Vulnerability management

Penetration testing

SOC 2 compliance

Security tooling

Cloud security

Risk assessment

Compliance frameworks

Vendor management liaison

Education

Bachelor's degree in Information Security or related field

Tools

Veracode

StackHawk

AlertLogic

Secureframe

KnowBe4

Microsoft Defender/Intune

Azure

Job description

ACES Quality Management is a remote‑oriented company delivering quality management across the financial services industry. The Information Security Analyst will own day‑to‑day security operations, manage vulnerability programs, and support SOC 2 compliance and audits.

This is a mid‑level, hands‑on role focused on platform administration and security controls rather than policy ownership. You will work with Veracode, StackHawk, Secureframe, and other tooling to strengthen security posture, while