CompanyCam

SaaS

Security&ComplianceAnalyst

$110–125k Remote Remote Friendly
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Mid candidates.

The Brief

“Security & Compliance Analyst at CompanyCam. Skills: Vanta Professional, NIST CSF 2.0, SOC 2 Type II, Risk intelligence. Administer Vanta Professional instance. Maintain automated test coverage”

What You'll Achieve.

Keep compliance program running in real time; Always audit-ready; Never scrambling when it counts; Ensure remediation actually gets done; Protect customer trust; Maintain rigorous vendor risk program; Respond to security questionnaires with confidence; Build compliance foundation for growth; Pursue bigger deals; Pursue more sophisticated customers

Industry & Context.

SaaS
Problems you'll solve

Analytical skills; Ability to take raw vulnerability data and turn it into something actionable

Eligibility Requirements

Must live and work permanently in the U.S.

What They're Looking For.

Must Have

3 to 5 years of experience in GRC, security compliance, or information security, Hands-on experience with Vanta (or a comparable platform like Drata or Tugboat Logic), Direct experience with a SOC 2 Type II audit lifecycle, Working knowledge of NIST CSF 2.0, Enough cloud infrastructure knowledge to have a real conversation with an engineer about control implementation, analytical skills

Nice to Have

mapping controls efficiently across both frameworks, closing gaps as they surface, triaging remediation tasks to the right owners, tracking through to resolution, supporting risk scoring, trending, and remediation tracking, conducting vendor security assessments, maintaining the third-party risk inventory, owning the intake and response process for inbound security questionnaires, acting as the cross-functional liaison, supporting security awareness initiatives, user access reviews, ongoing compliance program activities

What You'll Do.

Administer Vanta Professional instance

Maintain automated test coverage

Resolve broken integrations

Keep compliance dashboard accurate

Own NIST CSF 2.0 and SOC 2 Type II alignment

Map controls across frameworks

Close compliance gaps

Identify and route compliance gaps

Triage remediation tasks

Track remediation to resolution

Maintain evidence libraries

Prepare risk reporting

Translate technical vulnerabilities to business risk

Conduct vendor security assessments

Maintain third-party risk inventory

Own inbound security questionnaire process

Act as cross-functional liaison

Support security awareness initiatives

Support user access reviews

Support compliance program activities

How You'll Work.

Team & Collaboration

Connective tissue between technical teams and business; Cross-functional liaison between Security & Compliance and engineering, IT, and business teams

Communication Scope

Translating raw security data into risk intelligence; Translating technical vulnerabilities and control gaps into clear, prioritized business risk language

Full Job Description

Hi, we’re CompanyCam. We’re a simple-to-use photo documentation and productivity app for contractors of all commercial and home services industries. Packed with intuitive functionality, CompanyCam facilitates unparalleled communication and accountability across a contractor’s entire business. We’re committed to providing a consumer-grade, game-changing experience that helps our users build trust within their company and with their customers. But don’t let that corporate description fool you—the people behind our buttoned-up product are laid-back (but hardworking), genuine, and kickass, and you could be one of them! The Role Security and compliance at CompanyCam isn't a checkbox exercise. It's a business-critical function that sits at the intersection of engineering, product, and leadership, and this role is at the center of it. As our Security & Compliance Analyst, you'll own our continuous compliance monitoring program, administering our Vanta Professional instance, driving alignment across NIST CSF 2.0 and SOC 2 Type II, and translating raw security data into risk intelligence that leadership can actually act on. You'll be the connective tissue between technical teams and the business, keeping compliance moving without slowing anyone down. If you're someone who sees compliance as an asset rather than overhead, this one's for you. Location: You must live and work permanently in the U. S. to be considered. What You'll Do Administer CompanyCam's Vanta Professional instance, maintaining automated test coverage, resolving broken integrations, and keeping the compliance dashboard accurate and up to date Own our NIST CSF 2.0 and SOC 2 Type II framework alignment, mapping controls efficiently across both frameworks and closing gaps as they surface Identify and route compliance gaps, triaging remediation tasks to the right owners and tracking through to resolution Maintain evidence libraries and audit trails required for SOC 2 Type II readiness and annual audits Prepare ri

Free ATS check

Applying for this Security & Compliance Analyst role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

ANONYMOUS · UNFILTERED

What do employees actually say about CompanyCam?

Real rants from real employees. Read before you apply.

Read Company Rants →