Information Security Analyst

Owning the governance, risk, and compliance aspects of the security practice, the full-time Senior InfoSec GRC Analyst will manage the Information Security Management System (ISMS), drive ISO 27001 and SOC 2 audit cycles, and collaborate with cross-functional teams in a fully remote environment. Key responsibilities Continuously improve the ISMS by identifying and addressing gaps and implementing measurable enhancements Lead the security audit cycle for ISO 27001 and SOC 2, coordinating with auditors and internal teams to ensure compliance Review customer contracts for information security requirements and provide actionable recommendations to the negotiation teams Required qualifications Hands-on experience with ISO 27001 and SOC 2 certifications, including managing external audits Substantial background in information security, risk management, and compliance, particularly in a SaaS or cloud software environment Practical experience in reviewing security requirements in customer contracts and responding to security questionnaires Familiarity with GRC tools, compliance automation, and continuous monitoring Strong project management skills with the ability to collaborate across multiple teams effectively