IT Security and Compliance Specialist

About the role

The Client Services Home‑Based IT Security & Compliance Analyst will manage security, privacy and compliance requests from customers and prospects while supporting the company’s information‑security and regulatory‑compliance programs. The role works closely with IT, Legal, Sales and Operations to ensure audits, due‑diligence activities and compliance requirements are completed accurately and efficiently.

Key responsibilities

• Manage annual and ad‑hoc customer security questionnaires, compliance surveys and audit requests, tracking metrics and reporting status to leadership.
• Monitor company websites and web applications for threats, conduct vulnerability scans, penetration tests and patch assessments, and ensure remediation of identified risks.
• Maintain and update security and privacy policies to reflect evolving threats, regulatory changes and audit findings.
• Serve as escalation point for emerging web‑based security risks and coordinate timely remediation with IT and development teams.
• Support secure release management practices, integrating vulnerability management into the software lifecycle.
• Document and administer compliance programs, keeping all evidence and records current for ISO 27001, SOC 2 Type 2 and other relevant standards.

Required profile

• Strong stakeholder communication skills, able to convey security and compliance information to technical and non‑technical audiences.
• Exceptional attention to detail when reviewing questionnaires, audit evidence and regulatory documentation.
• Excellent organization and time‑management abilities to handle multiple requests, audits and remediation activities.
• Analytical problem‑solving and critical‑thinking capabilities to assess risks and recommend practical solutions.
• Collaborative mindset for working with cross‑functional teams and external auditors.

Required skills

• ISO 27001 framework
• SOC 2 Type 2 compliance
• Vulnerability scanning tools
• Penetration testing methodologies
• Patch management processes
• Web application security monitoring
• Secure release management practices