Information Security Analyst

You'll own the day-to-day execution of PlayerZero's security administration and compliance operations. You'll maintain security controls, investigate gaps, coordinate remediation, and keep audit programs organized and moving. Audit readiness is a central responsibility: you'll administer Vanta, coordinate internal control owners and external assessors, and prepare for SOC 2 audits, HIPAA-related assessments, and ISO 42001 audits. You'll also help build readiness for FedRAMP as a new area of investment. This is a hands-on role combining security operations, analysis, and audit coordination. You'll work closely with Engineering, SRE, and business teams, with internal IT responsibilities focused on security-related access and configuration.

Responsibilities

Administer security controls: maintain security configurations across identity, endpoint, and business systems, including MFA, access policies, and device compliance, and investigate exceptions and address gaps within your scope; Manage access governance: coordinate access reviews, evaluate permissions against least-privilege expectations, and verify that onboarding, role changes, and offboarding meet security requirements; Lead audit readiness and coordination: maintain the audit calendar, organize evidence, coordinate auditor requests, prepare internal owners for assessments, and check submissions for accuracy and completeness; Own compliance tooling and documentation: administer Vanta, maintain control mappings, policies, procedures, and evidence, and keep records aligned with how the company operates; Analyze findings and drive remediation: review security alerts, vulnerability findings, and control exceptions, investigate impact, prioritize with technical owners, and track corrective actions through validation and closure; Support FedRAMP readiness: help map requirements to existing controls, identify gaps, maintain security documentation, and coordinate remediation with Engineering, SRE, and external specialists; Support security reviews and response: prepare customer security questionnaire responses, coordinate third-party risk reviews, and assist with incident investigation, documentation, and follow-up; Improve security operations: build repeatable workflows, automate evidence collection and routine checks, and make outstanding risks and requirements visible to leadership

Requirements

Experience in security analysis, security administration, or security compliance operations within a software or cloud-based environment; Hands-on experience administering identity and access controls, endpoint security, or related security tooling; Experience preparing for audits or assessments, coordinating evidence across teams, and tracking findings through remediation; An understanding of how to evaluate whether a control is operating effectively and identify gaps between documented policy and actual practice; Familiarity with SOC 2 and experience working with control frameworks or regulatory requirements such as HIPAA, ISO standards, or NIST; The ability to investigate security findings, distinguish urgency from impact, and work with technical owners on practical corrective actions; Clear writing and strong organization, with the ability to maintain accurate documentation and manage multiple deadlines; Ownership and follow-through: you can execute independently, escalate decisions appropriately, and keep cross-functional work moving

Nice to have

Experience supporting FedRAMP readiness, assessments, or ongoing monitoring, including familiarity with NIST SP 800-53; Experience administering Vanta or a comparable compliance platform; Familiarity with AWS security controls and cloud environments; Exposure to ISO 42001 or AI governance programs; Scripting or automation experience that improves security operations or evidence collection