Information Security Compliance Analyst

Bonterra

Compliance Specialist for Bonterra, performing SOC reporting initiatives and technical risk assessments in a non-profit technology firm. Collaborating with teams for risk management and compliance efforts.

Posted 5/29/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $76,000 - $100,000 per yearWebsite

About the role

Key responsibilities & impact

Perform as the primary in the executing our annual Service Organization Controls (SOC) reporting initiatives, which includes several Bonterra products.
Works closely with other members of the Information Security Risk team.
Works closely with control owners across the company and internal and external auditors to ensure requests are completed in a timely manner as part of the overall project management process.
Performs technical risk assessments of third party suppliers' security and privacy controls.
Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities.
Will be responsible the play book for reporting of high risk events that involve compliance, risk and information security.
Assists in maintaining our overall security awareness, role based security trainings and phishing simulation programs across the enterprise.
Assists in conducting user activity audits where required.

Requirements

What you’ll need

3+ years experience performing risk and compliance activities
Project management experience.
A strong understanding of both SOC and ISO as there will be overlap.
Experience managing multiple priorities independently and in a team environment to achieve goals.
Excellent verbal and written communication skills.
Excellent organizational, planning and time management skills.
Excellent research and analytical skills.
Ability to exercise good judgement and tact in dealing with Bonterra senior management.
Proficient with technology and ability to learn our software systems, including GRC, ticketing and project management software and workflows.
Proven track record of proactively identifying needs and implementing solutions.
Information systems security professional certifications preferred (CRISC, CISA, CISSP, CISM, GSEC, GCFA, GCTI, CCSP, or other relevant Information Security certifications).

Benefits

Comp & perks

comprehensive benefits package that supports your health, well-being and growth

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

risk assessmentscompliance activitiesSOC reportingISO standardsproject managementsecurity controlsvendor risk managementsecurity awareness traininguser activity auditsanalytical skills

Soft Skills

communication skillsorganizational skillsplanning skillstime managementjudgementtactindependenceteam collaborationproactive problem solvingresearch skills

Certifications

CRISCCISACISSPCISMGSECGCFAGCTICCSP