Security & Compliance Analyst

November 19

🏄 California – Remote

Although this job is listed in California, this company may be open to hiring remote in other states.

⛰️ Colorado – Remote

Although this job is listed in Colorado, this company may be open to hiring remote in other states.

+8 more states

🏄 California – Remote ⛰️ Colorado – Remote 🌽 Illinois – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🏈 Ohio – Remote 🍂 Massachusetts – Remote ❄️ Minnesota – Remote 🍁 Vermont – Remote ☕ Washington – Remote

💵 $112.5k - $125k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

Apply Now

Receive Emails with Similar Jobs

InMarket

WebsiteLinkedInAll Job Openings

Advertising • Marketing • Analytics

InMarket is a real-time marketing and measurement platform that connects brands and consumers in meaningful ways. The company specializes in driving growth and optimizing ad spend through its industry-leading platform, which closes the gap between consumer intent and real-world commerce. By leveraging advanced analytics and real-time data, InMarket helps brands create impactful advertising strategies that measure real-world outcomes such as visits and sales lift. With a focus on effectiveness and privacy, InMarket partners with major platforms like Reddit to enhance advertising campaign measurement and attribution.

201 - 500 employees

Founded 2010

📋 Description

• You are the lead owner and primary executor for maintaining the company's security compliance programs, with a heavy focus on SOC 2 and ISO 27001. • Your mission is to proactively manage evidence collection, ensure continuous control adherence, lead the technical response to all customer security questionnaires, and drive key security and policy initiatives in close partnership with the Legal department. • Success is measured by the clarity and quality of compliance documentation, a continuous state of audit-readiness, and effective cross-functional collaboration. • Audit-Readiness: Maintain a system of record for all required compliance evidence, ensuring documentation is accurate, complete, and immediately auditable. • Evidence Collection: Proactively collect, validate, and organize all necessary artifacts and data to satisfy control requirements for formal SOC 2 and ISO 27001 audits. • Control Monitoring: Review and validate the operational effectiveness of security controls across cloud, endpoint, and identity platforms. • Questionnaire Leadership: Lead the end-to-end process for responding to all customer-facing security questionnaires, ensuring technical accuracy and consistent messaging. • Artifact Management: Maintain and continually update a secure, up-to-date library of security policies, audit reports, and compliance certifications for customer requests. • Policy Alignment: Work closely with the Legal department to draft, review, and update internal security policies and standards to ensure they comply with SOC 2, ISO 27001, and other regulatory requirements. • Risk Consultation: Act as the technical security expert for Legal department initiatives related to data privacy, contractual security requirements, and vendor due diligence.

🎯 Requirements

• 3-5 years of experience in a security, compliance, or audit-focused role. • Demonstrable experience leading or significantly contributing to a SOC 2 Type II and/or ISO 27001 certification or audit cycle. • Proven ability to manage evidence collection and maintain a system of record for compliance artifacts. • Technical understanding of security controls across cloud environments (AWS, GCP, or Azure), endpoint protection, and identity and access management (IAM). • Strong organizational skills with a rigorous, detail-oriented approach to documentation and control validation. • Excellent written and verbal communication skills, with experience responding to customer security questionnaires.

🏖️ Benefits

• Competitive salary, stock options, flexible vacation • Medical, Dental and Flexible Spending Account (FSA) • Company Matched 401(k) • Unlimited PTO (Within reason) • Talented co-workers and management • Agile Development Program (For continued learning/professional development) • Paid Paternity & Maternity Leave