Information Security Analyst (Remote Contractor)

About the role

We are seeking a remote Information Security Analyst to own the vendor security questionnaire process for multiple U.S.-based startup clients. You will work closely with technical and non‑technical stakeholders, ensuring accurate and timely completion of security questionnaires while deepening your knowledge of each client’s security posture.

Key responsibilities

• Monitor client Slack channels and respond promptly to security questionnaire requests.
• Create and manage tickets in Jira, Linear, or similar systems to track progress.
• Complete vendor security questionnaires (SIG, CAIQ, custom) using spreadsheets and platforms such as OneTrust, Whistic, and SecurityScorecard.
• Develop and maintain client answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and subject‑matter experts for technical clarifications.
• Escalate recurring gaps or missing controls that affect questionnaire responses.
• Ensure all questionnaires are completed accurately and within client deadlines.

Required profile

• 2–4 years of experience completing vendor security questionnaires, GRC/compliance, or a security‑focused client‑facing role.
• Hands‑on experience with SIG, CAIQ, or custom questionnaires.
• Working knowledge of SOC 2 and ISO 27001 frameworks.
• Strong organizational skills and ability to manage multiple requests simultaneously.

Required skills

• OneTrust
• Whistic
• SecurityScorecard
• Jira
• Linear
• Slack
• SOC 2
• ISO 27001
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Endpoint Management
• Encryption (at rest & in transit)
• Cloud infrastructure fundamentals
• Backup & Disaster Recovery
• Vendor Risk Management