SECURITY ANALYST (SOC 2 COMPLIANCE)

JOB TITLE : SECURITY ANALYST (SOC 2 COMPLIANCE)

LOCATION : FLORIDA,JACKSONVILLE



Client : INFOSYS/




Job Description:



Note: Candidate has to goto office from Day 1






About the Role:

We are seeking a meticulous and proactive Security Analyst to join our team. The primary focus of this role is to help achieve and maintain SOC 2 compliance and certification. The ideal candidate will guide internal teams in developing documentation and policies, and work closely with vendors and other stakeholders to gather necessary evidence for compliance.






Key Responsibilities:


• SOC 2 Compliance Management:
• Lead efforts to achieve and maintain SOC 2 compliance and certification.
• Develop, implement, and review security policies, procedures, and controls.
• Monitor compliance with security policies and procedures.
• Documentation and Policy Development:
• Guide internal teams in creating and maintaining comprehensive documentation for SOC 2 compliance.
• Ensure all documentation aligns with SOC 2 standards and requirements.
• Conduct regular reviews and updates of security policies and procedures.
• Collaboration and Evidence Gathering:
• Collaborate with internal teams and external vendors to gather evidence required for SOC 2 audits.
• Coordinate with various departments to ensure timely collection and submission of audit materials.
• Serve as the main point of contact for external auditors and ensure all audit requirements are met.
• Risk Assessment and Mitigation:
• Conduct regular risk assessments and vulnerability analyses.
• Identify security risks and develop strategies to mitigate them.
• Implement and monitor controls to ensure compliance and security.
• Training and Awareness:
• Conduct training sessions and workshops to educate employees about security policies and SOC 2 compliance requirements.
• Promote a culture of security awareness throughout the organization.






Qualifications:


• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience in information security, risk management, or compliance roles.
• Familiarity with SOC 2 standards and certification processes.
• Strong understanding of security frameworks and best practices.
• Excellent communication and interpersonal skills.
• Detail-oriented with strong organizational skills.
• Ability to work independently and as part of a team.






Preferred Qualifications:


• Relevant certifications such as CISSP, CISA, or CISM.
• Experience working in a security operations center (SOC) or similar environment.
• Prior experience with security audits and evidence gathering.









OVERALL IT 10 years