Top 3 Technical Skills
GRC support (SOC 2, evidence collection, compliance documentation)
Security operations support (alert monitoring, escalation, incident involvement)
Vulnerability tracking and remediation coordination Day-to-Day Responsibilities
Governance, Risk & Compliance:
Collect and organize SOC 2 audit evidence
Respond to RFI requests
Maintain risk registers and remediation tracking
Support internal control reviews
Maintain policies, standards, and procedures Security Operations:
Monitor security alerts and escalate incidents
Assist with incident investigations and post-incident reviews
Support phishing simulations and security awareness efforts
Track vulnerabilities and remediation progress
Maintain security dashboards and metrics Cloud & AppSec Support:
Assist validating cloud security configurations
Document cloud security procedures
Support vendor and thirdparty security reviews Required Experience / Qualifications
1-3 years experience in security, IT, or compliance
Understanding of security principles and risk management
Strong analytical and documentation skills Nice-to-Have
Experience with SOC 2, NIST 800-171, or ISO 27001
Familiarity with AWS or cloud environments
Microsoft enterprise tools experience
SIEM / phishing / vulnerability management exposure
Security+ or similar certification