Information Security Analyst – Remote Contractor

About the role

We are seeking a remote Information Security Analyst to own the end‑to‑end vendor security questionnaire process for multiple U.S.-based startup clients. Working as a contractor, you will collaborate with technical and non‑technical stakeholders to ensure timely, accurate responses that demonstrate each client’s security posture.

Key responsibilities

• Monitor client Slack channels and promptly address incoming security questionnaire requests.
• Create and track tickets in Jira, Linear or similar systems to manage the workflow.
• Complete vendor security questionnaires (SIG, CAIQ, custom) using spreadsheets and platforms such as OneTrust, Whistic, and SecurityScorecard.
• Develop a deep understanding of each client’s policies, controls, and technical environment.
• Maintain and improve answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and subject‑matter experts for technical clarifications.
• Escalate recurring gaps or missing controls that affect questionnaire responses.
• Ensure all questionnaires are delivered accurately and within client deadlines.

Required profile

• 2–4 years of experience completing vendor security questionnaires, GRC/compliance, or a security‑focused client‑facing role.
• Hands‑on experience with SIG, CAIQ or custom questionnaires.
• Working knowledge of SOC 2 and ISO 27001 frameworks.
• Strong organizational abilities and capacity to manage multiple requests simultaneously.

Required skills

• SOC 2, ISO 27001
• Single Sign‑On (SSO) and Multi‑Factor Authentication (MFA)
• Endpoint Management
• Encryption (at rest & in transit)
• Cloud infrastructure fundamentals
• Backup & Disaster Recovery
• Vendor Risk Management
• Jira, Linear
• OneTrust, Whistic, SecurityScorecard