Security & Compliance Associate

Overview

The Security & Compliance Associate is responsible for supporting governance, risk, and compliance (GRC) operations while ensuring adherence to security frameworks such as SOC 2, PCI DSS, GDPR, and other applicable standards. The role focuses on compliance monitoring, audit coordination, identity and access management, vulnerability management, penetration testing, vendor risk management, security awareness, and customer security support. Working closely with cross-functional teams, auditors, and third-party vendors, the associate ensures timely completion of compliance activities, maintains security documentation and evidence, drives remediation efforts, and contributes to strengthening the organization's overall security posture through process improvements and automation.

Job Description

Job Description

• Maintain and coordinate compliance activities across SOC 2, PCI DSS, GDPR, and other regulatory frameworks.
• Track regulatory updates and ensure timely implementation of compliance requirements.
• Monitor Vanta, triage failing controls, and coordinate remediation activities within SLA.
• Collect, organize, and maintain compliance evidence for audits and assessments.
• Perform control self-assessments, testing, and support audit requests.
• Coordinate with external auditors, consultants, and compliance vendors.
• Maintain policies, SOPs, version control, and compliance documentation.
• Track business-critical processes and ensure timely issue resolution.
• Coordinate annual and ad hoc penetration testing activities, including vendor management and remediation tracking.
• Manage penetration test reports, evidence, and audit documentation.
• Coordinate business continuity, disaster recovery, and incident response exercises.
• Document exercise outcomes and track corrective actions to completion.
• Support Identity and Access Management (IAM) activities including user access reviews, MFA, SSO, onboarding, role changes, and offboarding.
• Coordinate vendor onboarding, offboarding, compliance reviews, and third-party risk assessments.
• Maintain subprocessor inventories and customer notifications.
• Track vulnerabilities, patch management, endpoint security, MDM, EDR alerts, and email security incidents.
• Coordinate employee security onboarding, offboarding, background checks, NDA tracking, and security awareness training.
• Administer phishing simulations and security awareness campaigns.
• Maintain organizational risk registers and compliance records.
• Update trust center documentation and public security information.
• Respond to customer security questionnaires and support customer security reviews.
• Prepare security metrics, reports, and leadership dashboards.
• Identify opportunities for automation and process improvements across security and compliance operations.

Skills & Requirements

Apply Now