Cybersecurity Analyst

The role

You will build and run a security program against the NIST Cybersecurity Framework 2.0 and lead SOC 2 compliance. You will also work with Bertram Capital portfolio companies to ensure they meet required frameworks.

What you will do

• Maintain NIST CSF 2.0 Current and Target Profiles and track gaps.
• Draft, update, and manage information security policies, standards, and procedures.
• Maintain the risk register including documentation and follow up.
• Map controls across frameworks like NIST CSF, SOC 2, CIS Controls, and ISO/IEC 27001.
• Manage third-party supplier due diligence for Bertram vendors.
• Own the security baseline for each portfolio company.
• Work with portfolio company leadership and IT teams to assess compliance.
• Run framework gap assessments and build remediation plans.
• Coordinate SOC 2 readiness and audits.
• Run recurring control activities like access reviews and security awareness training.

Required qualifications

• 0–3 years of experience in information security, GRC, IT audit, risk, or IT operations.
• Bachelor's degree in cybersecurity, information systems, computer science, or a related field, or equivalent practical experience.
• Working knowledge of at least one major security framework (NIST CSF, NIST SP 800-53, ISO/IEC 27001, or CIS Controls).
• Basic understanding of SOC 2 Trust Services Criteria and Type I vs Type II reports.
• Exceptional organization.
• Clear written and verbal communication.
• Process mindset.
• Comfort with core IT concepts: identity and access management, endpoints, networks, and cloud services.

Nice to have

• Relevant certifications, such as ISC2 CC, CompTIA Security+, ISACA CISA, or ISC2 CGRC.
• Hands-on involvement in a SOC 2, ISO/IEC 27001, or similar audit.
• Strong Excel or Google Sheets skills.
• Exposure to compliance automation platforms (Vanta, Drata, or similar).
• Familiarity with public cloud environments (AWS, Azure, or Google Cloud) and Microsoft 365 or Google Workspace security settings.
• Experience with ticketing and project tools (Jira, monday.com, or similar).

Benefits

• Medical, dental, and vision benefits provided at no cost to the employee.
• Generous 401K match.
• Take what you need PTO policy.

About the company

Bertram Capital is a private equity firm targeting investments in lower middle market companies. Bertram Labs is the technology partner to Bertram Capital.