Information Security Analyst – Remote Contractor

About the role

We are seeking a remote Information Security Analyst to join a fast‑growing U.S. cybersecurity consulting firm. The contractor will manage vendor security questionnaire processes for multiple startup clients, ensuring timely and accurate responses that align with frameworks such as SOC 2 and ISO 27001.

Key responsibilities

• Monitor client Slack channels and respond promptly to security questionnaire requests.
• Create and track tickets in Jira, Linear, or similar systems.
• Complete vendor questionnaires (SIG, CAIQ, custom) using spreadsheets and platforms like OneTrust, Whistic, and SecurityScorecard.
• Develop deep understanding of each client’s security posture, policies, and controls.
• Maintain and improve answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and SMEs for technical clarifications.
• Escalate recurring gaps or missing controls that affect responses.
• Ensure all questionnaires are accurate and delivered within client deadlines.

Required profile

• 2–4 years of experience completing vendor security questionnaires or working in GRC/compliance.
• Hands‑on experience with SIG, CAIQ, or custom questionnaires.
• Working knowledge of SOC 2 and ISO 27001.
• Strong organizational skills and ability to manage multiple requests simultaneously.

Required skills

• Security platforms: OneTrust, Whistic, SecurityScorecard.
• Ticketing tools: Jira, Linear.
• Collaboration: Slack.
• Frameworks: SOC 2, ISO 27001.
• Concepts: Single Sign‑On (SSO), Multi‑Factor Authentication (MFA), Endpoint Management, Encryption (at rest & in transit), Cloud infrastructure fundamentals, Backup & Disaster Recovery, Vendor Risk Management.