Information Security Compliance Analyst

TL;DR

Information Security Compliance Analyst: Performing annual Service Organization Controls (SOC) reporting initiatives and technical risk assessments of third-party suppliers with an accent on ensuring compliance, managing project timelines, and maintaining vendor risk management activities. Focus on identifying needs, implementing solutions, and assisting in security awareness programs across the enterprise.

Location: Remote (United States). Unable to consider candidates who require current or future sponsorship for employment authorization.

Salary: $76,000 - $100,000

Company

hirify.global is a product company developing AI-powered solutions to increase giving and impact in the social good industry, supporting over 20,000 customers including nonprofits and Fortune 100 companies.

What you will do

• Execute annual Service Organization Controls (SOC) reporting initiatives for hirify.global products.
• Collaborate closely with the Information Security Risk team, control owners, and internal/external auditors.
• Perform technical risk assessments of third-party suppliers' security and privacy controls.
• Maintain a register of relevant suppliers, controls, and risks for ongoing vendor risk management activities.
• Develop a playbook for reporting high-risk events involving compliance, risk, and information security.
• Assist in maintaining security awareness, role-based security trainings, and phishing simulation programs.

Requirements

• 6+ years’ experience performing risk and compliance activities, or less with a relevant degree.
• Project management experience.
• Experience managing multiple priorities independently and in a team environment.
• Excellent organizational, planning, and time management skills.
• Excellent research, analytical, verbal, and written communication skills.
• Proficiency with technology and ability to learn GRC, ticketing, and project management software.

Nice to have

• Information systems security professional certifications (CRISC, CISA, CISSP, CISM, GSEC, GCFA, GCTI, CCSP).

Culture & Benefits

• Innovating with a higher purpose: to increase giving to 3% of US GDP by 2033.
• Fostering an inclusive, equitable culture where every team member belongs.
• Building AI-powered tools to solve real human challenges.
• Offering a comprehensive benefits package that supports your health, well-being, and growth for full-time US employees.