Security & Compliance Analyst

The role

Support Graphite in security and compliance efforts through hands-on technical work. Maintain strong controls and meet SOC 2 and GDPR commitments.

What you will do

• Monitor and triage security alerts, and escalate real issues.
• Coordinate incident response, from triage through post-mortem, and run tabletop exercises.
• Triage security advisories and vulnerabilities, and track patching against remediation SLAs.
• Maintain technical security controls, including encryption, key and certificate management, and secrets rotation.
• Review cloud and infrastructure configurations against security policies, and follow up on fixes.
• Run periodic checks including vulnerability scans, backup restores, and access reviews.
• Collect SOC 2 evidence, including for failing Vanta tests.
• Support vendor security reviews, client security questionnaires and GDPR work.
• Report on the status of alerts, vulnerabilities and open compliance items.

Required qualifications

• 3 to 5 years in a security operations, cybersecurity or security engineering role.
• Working knowledge of SOC 2 and GDPR and audit processes.
• Hands-on experience with log analysis, vulnerability management and incident response, including post-mortems.
• Working knowledge of encryption and key and certificate management.
• Experience securing cloud infrastructure on AWS and GCP.
• Excellent written and verbal English communication skills.

Nice to have

• experience with Vanta or a similar compliance platform
• certification such as Security+, CySA+ or CISSP (or Associate of ISC2)

Benefits

• Competitive pay
• Flexible PTO
• Quality healthcare coverage
• education opportunities

About the company

Graphite is a technology-enabled growth agency that helps fast-growing companies unlock sustainable revenue through content, SEO, and AEO. It is a fully distributed company with team members located across North America, Latin America, and Europe.