SOC Compliance HR Analyst

Elios, Inc.; United States; Remote; USD 124,000 - 165,000; Part time

Job summary

Elios, Inc. is seeking a SOC Compliance HR Analyst to own the people side of a SOC 2 program in a remote contract role.

You will translate HR processes into auditable controls, manage background checks, onboarding, offboarding, policy acknowledgments, and security training to ensure evidence is audit-ready. You'll collaborate across HR, IT, and security to build scalable controls, maintain documentation in the compliance platform, and support auditors during readiness and fieldwork while

Qualifications

• 5+ years in HR operations or HR compliance, including at least one SOC 2 audit.
• Familiarity with SOC 2 Trust Services Criteria; exposure to ISO 27001, HIPAA, or NIST is a plus.
• Hands-on experience with a compliance automation platform (Vanta, Drata, Secureframe).
• Experience with HRIS systems (Rippling, BambooHR, Gusto) and identity/access integration.
• Clear writing ability; policies should read like instructions.
• Ability to work independently and asynchronously.
• Startup or small company experience preferred.
• SHRM-CP, PHR, or certs like CISA/CRISC/Security+ a bonus.

Responsibilities

• Map HR processes to SOC 2 controls, especially personnel security, onboarding, and termination.
• Write and maintain HR policies: code of conduct, acceptable use, background screening, disciplinary process, handbook.
• Create onboarding/offboarding checklists with IT for timely access changes.
• Track background checks, policy sign-offs, NDAs, and annual security training.
• Collect and organize audit evidence in the compliance platform.
• Support quarterly access reviews and performance review cycles as controls.
• Act as HR point of contact for external auditors during readiness and fieldwork.
• Identify gaps early and propose fixes for a lean team.

Skills

HR operations

HR compliance

GRC

SOC 2

Policy writing

Audit readiness

Tools

Vanta

Drata

Secureframe

Rippling

BambooHR

Job description

Location: Remote (US) | Type: Contract | Experience: 5+ years | Pay: $90-$120/hr

About the Role

We're hiring a SOC Compliance HR Analyst to own the people side of a SOC 2 program: the background checks, onboarding and offboarding records, policy acknowledgments, security training, and access changes that auditors will ask to see. You'll turn HR processes into controls that hold up under audit, then keep the evidence clean enough that the next audit is uneventful.

This is a remote contract role with an early-stage industrial AI company whose software runs inside critical energy operations. Their customers expect enterprise-grade security, and the team is building the compliance foundation to match. The work sits between HR, IT, and security, so you'll be the person who translates control language into steps a small team can actually follow.

If you've ever inherited a SOC 2 audit where HR evidence lived in five inboxes and a shared drive, this is the chance to build it right from the start.

What You'll Do

• Map HR processes to the SOC 2 Trust Services Criteria, especially the controls covering personnel security, onboarding, and termination
• Write and maintain HR policies: code of conduct, acceptable use, background screening, disciplinary process, and the handbook sections auditors review
• Build onboarding and offboarding checklists with IT so access is granted and removed on time
• Track background checks, policy sign-offs, NDAs, and annual security awareness training, and follow up on whatever is missing
• Collect and organize audit evidence in the compliance platform (Vanta, Drata, Secureframe, or similar)
• Support quarterly access reviews and performance review cycles as documented controls
• Serve as the HR point of contact for external auditors during readiness, Type I, and Type II fieldwork
• Flag gaps early and recommend fixes sized for a lean, growing team

Qualifications

• 5+ years in HR operations, HR compliance, or GRC, including at least one SOC 2 audit where you owned the HR controls
• Working knowledge of SOC 2 Trust Services Criteria; exposure to ISO 27001, HIPAA, or NIST is a plus
• Hands-on experience with a compliance automation platform such as Vanta, Drata, or Secureframe
• Familiarity with HRIS platforms (Rippling, BambooHR, Gusto, or similar) and how they connect to identity and access tools
• A clear writer. Your policies should read like instructions, not legal boilerplate
• Comfortable working independently and asynchronously with people who aren't compliance experts
• Startup or small company experience strongly preferred
• SHRM-CP, PHR, or a compliance certification (CISA, CRISC, Security+) is a nice to have

Why Join Us

You'll work directly with a small, senior team that ships software into some of the toughest operating environments in industry. Decisions happen quickly, there's little bureaucracy, and the compliance program you help build will become part of how the company wins enterprise customers.

If you like being the person who makes an audit go smoothly, and you'd rather build the system than babysit someone else's, this role is worth a conversation.