IT & Security Operations Analyst

🔥 35 minutes ago

🇺🇸 United States – Remote

💵 $80k - $100k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

LCvista

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2016

☁️ SaaS

🤝 B2B

📋 Compliance

💰 Private Equity Round on 2023-01

SaaS • B2B • Compliance

LCvista is an integrated software platform that helps accounting firms manage continuing professional education (CPE), compliance, and learning & development at scale. The platform includes a content marketplace, automated attendance and engagement tools, centralized tracking for CPE across 1,100 jurisdictions, and services such as a Learning & Development Accelerator, CAS talent development, and performance coaching. LCvista positions itself as a professional-readiness solution for accounting firms, automating compliance tracking, learning operations, and development programs; it reports metrics like 200,000 CPAs and staff on-platform, 69M+ CPE credits issued, 1M learning plans assigned, and is used by 400+ accounting firms including a large share of top firms.

📋 Description

• Manage the day-to-day operations of LCvista's SOC 2 Type II program, including evidence collection, control monitoring, and auditor coordination. • Monitor control health and work with control owners to remediate gaps. • Coordinate annual security policy and procedure reviews with the vCISO. • Run periodic user access reviews across AWS, Microsoft 365, and key SaaS applications. • Operate and document the security program in ControlMap. • Run employee security awareness activities, including onboarding and annual training, phishing simulations, and completion tracking. • Coordinate developer security training with Engineering. • Coordinate annual third-party penetration tests and track findings through remediation and retesting. • Track vulnerability prioritization and remediation with Engineering. • Support incident response activities and tabletop exercises under the vCISO. • Monitor security news, threats, and vulnerabilities and flag relevant risks to the CTO and vCISO. • Manage customer and prospect security questionnaire responses and maintain approved answers and documentation. • Support Sales, Customer Success, and Legal with security and data protection contract terms. • Run vendor security reviews and approvals, review security documentation, and maintain vendor and SaaS inventories. • Serve as the day-to-day contact for the MSP, tracking SLAs and security compliance. • Manage employee and contractor onboarding, role changes, and offboarding, including access provisioning and revocation. • Own laptop procurement, inventory, shipping, setup, recovery, and secure disposal. • Ensure Microsoft 365 and endpoint configurations meet security standards for MFA, encryption, patching, and EDR. • Administer and troubleshoot back-office tools and create self-service procedures and guides.

🎯 Requirements

• 3+ years of experience in IT operations, IT security, or compliance, ideally at a SaaS or technology company. • Hands-on experience supporting a SOC 2, ISO 27001, or similar audit, including evidence collection and control monitoring. • Experience completing customer security questionnaires or supporting security reviews. • A solid general technical background, including working knowledge of Microsoft 365 and Entra ID administration (users, groups, MFA, licensing). • Experience managing IT asset or laptop lifecycles, from procurement through secure disposal. • Comfort administering and troubleshooting a range of SaaS business applications. • Familiarity with security fundamentals and frameworks, such as NIST CSF, CIS Controls, and OWASP. • Strong organizational skills and attention to detail, especially for tracking inventories, evidence, and vendor records. • Clear written and verbal communication skills, with the ability to explain technical and security topics to non-technical colleagues. • A service-oriented mindset and the ability to manage competing priorities across teams. • Must be currently authorized to work in the United States for any employer. • Preferred: Experience with compliance automation platforms, such as Vanta, Drata, or ControlMap. • Preferred: Experience with security awareness platforms, such as KnowBe4. • Preferred: Experience running vendor risk management or third-party security review processes. • Preferred: Familiarity with AWS security fundamentals, such as IAM, logging, and encryption. • Preferred: Relevant certifications, such as CompTIA Security+, Network+, or Microsoft 365 Fundamentals/Administrator, or progress toward one. • Preferred: Experience with questionnaire automation or trust center tools. • Preferred: Basic scripting or automation skills (e.g., PowerShell, Python, or workflow tools like n8n or Power Automate). • Preferred: Experience with multi-tenant SaaS, compliance platforms, or edtech.

🏖️ Benefits

• Health, Dental, and Vision Insurance (100% paid premiums for employees, 80% paid for dependents with a buy-up plan option) • HRA, FSA, HSA offerings • Unlimited PTO & Sick/Wellness Hours • Paid parental leave, paid medical leave • 12 paid holidays + 2 flexible holidays • 401k, Roth options • Anniversary awards • Laptop + keyboard with an annual work-from-home stipend to purchase equipment needed for home offices

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume