InfoSec Analyst II, Trust

This is a fully remote position, open to applicants in Connecticut, +5 more states.

📋 Description

• Participate in AI governance initiatives, encompassing reviews of AI use cases, vendor evaluations, assessments of data handling, and documentation of relevant security measures.

• Oversee SOC 2, ISO 27001, and customer security assessments by gathering evidence and conducting control tests.

• Facilitate comprehensive security assessments, ensuring dependencies, findings, and remediation are effectively tracked.

• Keep precise compliance records and streamline recurring evidence-gathering processes through automation.

• Convert technical compliance data into understandable responses for customer inquiries and RFP submissions.

• Assess AI governance risks, including data leaks, prompt injections, and third-party vulnerabilities.

• Deliver security metrics and status updates to relevant stakeholders.

• Foster cross-functional collaborations.

• Transform security requirements into effective, repeatable procedures.

⛳️ Requirements

• Background in GRC, compliance, or IT audit within a SaaS, fintech, or technology setting.

• Solid understanding of SOC 2, ISO 27001, or NIST frameworks.

• Proficiency in testing controls, tracking remediation efforts, and converting technical specifications into actionable steps.

• Excellent organizational and communication abilities to handle various assessments and engage with multiple stakeholders.

• A systems-oriented mindset aimed at enhancing workflows.

• A keen interest in AI security and governance.

• Experience in conducting AI risk assessments, vendor evaluations, model governance, or enterprise AI usage policies.

• Preferred: familiarity with APIs, spreadsheets, scripting, or workflow automation to enhance evidence collection or reporting.

• Preferred: experience in blockchain, cryptocurrency, financial services, cybersecurity, or another high-trust domain.

• Must be legally authorized to work for any employer in the United States without limitations.

• Required to disclose if future sponsorship is needed for maintaining U.S. work authorization.

🏝️ Benefits

• Provides equity options.

• Includes bonus opportunities.

• Offers a remote work arrangement.

• Accommodations during the interview process for applicants with disabilities.