Information Security Analyst – Remote Contractor

About the role

We are seeking a remote Information Security Analyst to join a fast‑growing U.S. cybersecurity consulting firm. You will own the end‑to‑end vendor security questionnaire process for multiple startup clients, ensuring timely and accurate responses that support enterprise deals.

Key responsibilities

• Monitor client Slack channels and respond promptly to security questionnaire requests.
• Create and manage tickets in Jira, Linear, or similar systems to track progress.
• Complete vendor security questionnaires (SIG, CAIQ, custom) using spreadsheets and platforms such as OneTrust, Whistic, and SecurityScorecard.
• Develop a deep understanding of each client’s security posture, policies, controls, and technical environment.
• Maintain and improve client answer libraries and knowledge bases.
• Coordinate with security consultants, engineers, and subject‑matter experts for technical clarification.
• Escalate recurring gaps or missing controls that affect questionnaire responses.
• Ensure all questionnaires are completed accurately and within client deadlines.

Required profile

• 2–4 years of experience completing vendor security questionnaires, GRC/compliance, or a security‑focused client‑facing role.
• Hands‑on experience with SIG, CAIQ, or custom questionnaires.
• Working knowledge of SOC 2 and ISO 27001 frameworks.
• Strong organizational skills and ability to manage multiple requests simultaneously.

Required skills

• SIG and CAIQ questionnaire expertise.
• OneTrust, Whistic, SecurityScorecard platforms.
• Jira, Linear ticketing tools.
• Slack communication.
• Understanding of SSO, MFA, endpoint management, encryption (at rest & in transit), cloud infrastructure fundamentals, backup & disaster recovery, and vendor risk management.