Lead Security & Compliance Analyst

About the Role:

• This is a hybrid role combining security compliance and audit with hands-on technical security.
• You will own the compliance audit cycle end-to-end (SOC 1, SOC 2, HITRUST) and work on vulnerability management, cloud security, and third-party risk.

Responsibilities:

• Own compliance audits: scoping, evidence collection, auditor coordination, and findings remediation.
• Run vulnerability management: scanning, triage, prioritization, and driving remediation with engineering teams.
• Support security incident response, fraud investigations, and third-party risk assessments.

What We're Looking For:

• 4+ years combined experience in security compliance/GRC and hands-on technical security.
• Direct experience supporting SOC 1/SOC 2 and/or HITRUST audits; working knowledge of HIPAA.
• Hands-on experience with vulnerability scanning, AWS security, and ability to write clear policies.

Benefits:

• Medical, dental, and vision coverage with low-to-no-cost premium options.
• 401(k) retirement plan, equity incentive plan, and annual company-wide bonus.
• Remote-first culture with flexible vacation policy, summer Fridays, and home office stipend.