About Careertakes

👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, IT.

Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.

---

What You’ll Do

This entry-level Security Compliance Analyst role supports the Confidential Client’s information-security compliance and GRC activities. You will work closely with senior security and engineering staff to help prepare audit evidence, respond to client requests, and maintain compliance documentation.

• Coordinate security audits: gather evidence, track responses, follow up on open items, and maintain audit-ready records.
• Respond to client security questionnaires and requests for information with senior review and guidance.
• Maintain an organized repository of approved responses, policies, and audit records.
• Support ISO compliance (e.g., ISO/IEC 27001) and ISMS documentation updates.
• Maintain compliance calendars and track corrective actions, remediation, and audit findings.
• Work with Engineering, IT, and Product teams to document and track security controls (access/identity, change management, vulnerability/patch, logging/monitoring, incident response, encryption, backup/DR).
• Help identify control gaps, track remediation with technical owners, and prepare audit-ready evidence.
• Review vendor security documentation (questionnaires, SOC reports, ISO certificates); maintain a centralized vendor inventory with risk levels and review status.
• Support new-vendor intake to ensure security reviews are completed before access is granted, escalating higher-risk cases to senior staff.
• Maintain risk registers, compliance records, and recurring reporting/dashboards; identify automation and process-improvement opportunities.

---

Qualifications

Required

• 0–2 years of experience or exposure to information security, IT, compliance, audit, risk management, or related functions (including internships or academic projects).
• Strong organizational skills and attention to detail.
• Strong written and verbal communication skills.
• Ability to manage multiple tasks, track follow-ups, and meet deadlines with guidance.
• Proficiency with Microsoft Office (Excel, Word, Outlook, Teams).
• Willingness to learn security, compliance, vendor risk, and audit concepts.
• Ability to handle sensitive and confidential information professionally.

Preferred

• Bachelor’s degree in Information Security, Cybersecurity, IT, Business, Risk Management, or related field (or equivalent hands-on experience).
• Entry-level certifications such as CompTIA Security+, (ISC)2 Certified in Cybersecurity, ISO 27001 Foundation, or Microsoft Security Fundamentals — or willingness to pursue them.
• Familiarity with frameworks such as ISO 27001, ISO 27701, SOC 2, or the NIST Cybersecurity Framework.
• Experience maintaining documentation, inventories, or audit materials.
• Interest in GRC, third-party risk management (TPRM), privacy, or information security.

---

Core Competencies

• Strong organization and attention to detail
• Clear written and verbal communication
• Eagerness to learn security and compliance concepts
• Reliability and follow-through
• Teamwork and collaboration
• Discretion handling sensitive information

---

Success Measures

• Reliable, timely, and accurate evidence gathering for audits
• Well-organized client security and ISO compliance documentation
• Effective collaboration with Engineering and cross-functional teams
• Consistent vendor security reviews and accurate vendor inventories
• Clear tracking and follow-up of findings, risks, and remediation
• Growing knowledge and increasing independence over time

---

Equal Opportunity & Hiring Transparency

Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.

If you have questions about how your data is used, please contact us directly.