SOC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Security & Compliance Analyst maintaining SOC 2, ISO 27001 and Cyber Essentials readiness for SyncEzy’s B2B SaaS integration platform. Owning evidence, controls, risks and audit coordination remotely.
Responsibilities:
- Maintain year-round readiness for SOC 2, ISO 27001 and Cyber Essentials
- Own routine compliance administration, evidence collection, control monitoring and follow-up
- Translate compliance requirements into practical actions for Engineering, DevOps and IT teams
- Identify gaps early, track remediation to closure and maintain clear documentation showing that controls are designed and operating effectively
- Coordinate compliance activities across SOC 2, ISO 27001 and Cyber Essentials
- Work closely with Engineering, DevOps, IT and management to keep controls operating effectively and evidence audit-ready throughout the year
- Move between policy work, evidence collection, endpoint/software compliance, risk tracking, access reviews and audit coordination
- Serve as the primary owner of routine compliance operations and follow-up, with the Senior Engineering Manager as management and escalation point
Requirements:
- 2–4 years of relevant experience in GRC, information security compliance, security assurance, IT audit or a closely related role
- Practical exposure to at least one major security/compliance framework such as SOC 2 or ISO 27001
- Experience collecting, reviewing and organizing audit evidence and working with technical control owners
- Strong documentation and policy-writing skills with attention to consistency and audibility
- Working understanding of cloud environments, identity and access management, endpoint security, vulnerability management, logging, backups and change management
- Ability to read technical evidence and ask the right questions without needing to be a software engineer or DevOps engineer
- Strong ownership, follow-up and organizational skills; comfortable tracking multiple recurring compliance activities simultaneously
- Clear written and verbal communication skills and the ability to work with both technical and non-technical stakeholders
- Familiarity with Cyber Essentials is strongly preferred
- Experience with compliance automation or GRC platforms such as Vanta, Drata, Sprinto or equivalent tools
- Experience working in a SaaS, software-development or cloud-first organization
- Familiarity with MDM / endpoint-management tooling and software inventory reviews
- Exposure to AWS, Azure or other public-cloud security controls
- Experience supporting customer security questionnaires or vendor-risk assessments
- Relevant certifications such as ISO 27001 Internal Auditor / Lead Implementer, Security+, CISA, CRISC or similar are useful but not mandatory
Benefits:
- Allowance for Internet / Phone costs
- Company Hardware provided after completing probation
- Continuous development and education allowances
- Flexible Remote work from anywhere (As long as you have good internet and communication)
- Excellent growth opportunities, growth into leadership for the right candidate
- Generous policies around leave / social and training allowances
- End of year Bonuses based on company + Individual performance
- Zero Commute, Work while you work, play while you play. Perfect Work / Life balance
- Remote job opportunities and other benefits to be discussed during the interview
- Flexible, family friendly & fun work environment
Similar Jobs
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing managed security services for Axians Switzerland. Analyzing cyberthreats and operating Microsoft Azure and M365 security environments.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss customers. Analyzing cyber threats across Microsoft 365 and Azure environments.
Security Operations Engineer, Microsoft Solutions
Security Operations Engineer operating managed security services across Microsoft 365 and Azure. Analyzing cyber threats and delivering security projects for Axians Schweiz’s digital transformation clients.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss cloud and IT customers. Analyzing cyberthreats and delivering Microsoft security projects.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating Axians Switzerland’s managed security services. Analyzing cyberthreats and implementing Microsoft-focused security projects across Azure and M365 environments.
Director, Security Operations Center
Director leading Thrive’s Security Operations Center for cloud, cybersecurity, networking, disaster recovery, and managed services. Overseeing SOC operations, incident response, threat monitoring, and analyst teams.
SOC Analyst
SOC Analyst monitoring security alerts and resolving incidents for Leadtech’s global digital products. Improving vulnerability management and security processes across cross-functional teams.
Global IT Security Operations Lead – Exposure Management
Global security operations leader building incident response, detection, and exposure management capabilities. Protecting aerospace intellectual property, manufacturing uptime, and hybrid IT environments.
Security Operations Associate
Security Operations Associate supporting Everbridge’s critical event management technology. Coordinating secure journey services, security assistance, vendors, client communications, and operational records.
Security Incident Response Manager – Abuse Operations
Stripe Security Incident Response Manager investigating fraud and abuse across its financial infrastructure platform. Leading incident response, mitigation, automation, and cross-functional security improvements.
Senior SOC Analyst
Senior SOC Analyst investigating and resolving OT security incidents for ABB’s industrial technology solutions. Performing forensic analysis, improving threat detection, and automating SOC processes.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer bei Axians Schweiz für Microsoft Cloud- und Managed-Security-Umgebungen. Implementierung, Betrieb und Weiterentwicklung von Managed Security Services sowie Analyse von Cyberbedrohungen.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating managed security services for Axians Switzerland’s Microsoft cloud and IT environments. Analyzing cyberthreats and implementing security projects.
Security Engineer III – Security Operations
Security Engineer detecting, investigating, and responding to threats across Primer's global payments infrastructure. Building Elastic, AWS, Python, and Terraform security operations automation.
Director of Security Operations
Director of Security Operations leading Backblaze’s cybersecurity monitoring, incident response, and vulnerability programs. Driving AI-assisted defenses, automation, and operational resilience across cloud and distributed environments.
Security Engineer – SOC
Security Engineer developing SOC detection systems for APT-ONE, a Berlin cybersecurity consultancy. Building SIEM/XDR platforms, detection-as-code pipelines, and AI-assisted security workflows.
HR Operations Analyst – Security & Apps
HR operations security analyst optimizing NBCUniversal’s global HR applications and access systems. Managing security access, audits, application releases, and HR technology improvements.
Security Operations Analyst
Security Operations Analyst defending Unqork’s AI-powered enterprise application platform. Monitoring threats, engineering SIEM/SOAR detections, and supporting incident response and compliance.
Tier 2 SOC Analyst
Tier 2 SOC Analyst investigating and containing escalated SIEM and EDR threats for federal and Fortune 100 clients. Developing runbooks, managing vulnerabilities, and meeting overnight incident-response SLAs.
Tier 1 SOC Analyst
Tier 1 SOC Analyst monitoring SIEM and EDR alerts for Dragonfli Group’s federal and Fortune 100 cybersecurity clients. Triaging incidents, tracking vulnerabilities, and escalating overnight events.