Staff Security Analyst (Governance and Trust)

TalentHop; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

TalentHop is seeking a Staff Security Analyst (Governance and Trust) to lead compliance and trust functions. You will manage external security examinations, drive customer diligence, and oversee third-party risk operations.

You’ll own customer-facing automation tools and develop reusable controls to streamline audits and reporting. The role emphasizes cross-functional collaboration within an international, distributed team and mentoring junior staff to elevate security practices across the

Qualifications

• Experience leading SOC 2 Type 2 and ISO 27001 audits.
• Expertise in regulated-industry customer diligence processes and audits.
• Proven vendor risk assessments and disposition decisions.
• Strong data-driven evidence collection from systems of record.
• Mentoring junior staff and managing work queues with metrics.

Responsibilities

• Manage end-to-end external security examinations including evidence collection and auditor coordination.
• Oversee customer security diligence processes such as questionnaires, audits, and Trust Center content.
• Lead the third-party risk management program including vendor assessments and critical supplier agreements.
• Serve as product owner for customer-facing automation tools that support questionnaire responses and vendor triage.
• Develop reusable artifacts and control improvements for recurring compliance inquiries.
• Produce findings and remediation evidence for external reviews and corrective actions.
• Guide public-sector compliance analyst activities and federal diligence.
• Report on compliance outcomes and lead cross-team corrective actions.
• Mentor and develop team members to support growth and performance.

Skills

SOC 2 Type 2

ISO 27001

Vendor risk management

Audits & certifications

Customer diligence

Cross-functional collaboration

Mentoring

Data-driven evidence collection

Distributed team collaboration

Education

Bachelor’s degree in Information Security or related field

CISSP

Tools

GRC Tools

Job description

The organization operates in the open source software industry, providing hardened, secure, and production-ready builds that support software engineers and AI agents. It addresses the challenges of software security, compliance, and risk management by delivering trusted open source solutions used by major enterprises and industry leaders globally.

About the Opportunity:

The STAFF SECURITY ANALYST (GOVERNANCE AND TRUST) leads the compliance and trust functions within the organization's Governance & Trust team. The role ensures effective execution of security examinations and certifications, manages customer security diligence, and oversees third-party risk operations. This position drives the integrity and reliability of security practices that underpin the organization's mission, contributing to customer trust and regulatory compliance.

Responsibilities:

• Manage end-to-end execution of external security examinations including evidence collection, sample fulfillment, and auditor coordination.
• Maintain collaborative relationships across departments to ensure compliance evidence and remediation activities are supported.
• Oversee customer security diligence processes such as questionnaires, audits, and Trust Center content.
• Lead the third-party risk management program including vendor assessments and management of critical supplier agreements.
• Serve as product owner for customer-facing automation tools that support questionnaire responses and vendor triage.
• Develop reusable artifacts and control improvements to streamline recurring compliance inquiries.
• Utilize a unified controls catalog to manage frameworks and report defects for governance review.
• Produce findings and remediation evidence that withstand external review and support corrective actions.
• Guide public-sector compliance analyst activities related to assessor relationships and federal diligence.
• Report on compliance outcomes, conduct retrospectives on issues, and lead cross-team corrective actions.
• Mentor and develop team members, supporting growth and performance.

Requirements:

• Experience leading combined SOC 2 Type 2 and ISO 27001 audit processes, including handling evidence and auditor negotiations.
• Expertise in regulated-industry customer diligence processes and maintaining commercial balance during security assessments.
• Proven track record in managing vendor risk assessments and making informed disposition decisions.
• Comfort with data-driven evidence collection from systems of record and familiarity with policy and control management tools.
• Knowledge of management systems with corrective-action processes and ability to distinguish between task completion and control effectiveness.
• Experience mentoring junior staff and managing work queues using metrics.
• Strong cross-functional collaboration skills.
• Ability to work effectively in an international and distributed team environment.

Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Equal Opportunity Statement:

Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.