SOC Analyst

Requisitos

• 2–4 years of relevant experience in GRC, information security compliance, security assurance, IT audit or closely related role
• Practical exposure to at least one major security/compliance framework such as SOC 2 or ISO 27001
• Experience collecting, reviewing and organizing audit evidence and working with technical control owners
• Strong documentation and policy-writing skills with attention to consistency and auditability
• Working understanding of cloud environments, IAM, endpoint security, vulnerability management, logging, backups and change management

Desejáveis

• Familiarity with Cyber Essentials
• Experience with compliance automation or GRC platforms such as Vanta, Drata, Sprinto or equivalent
• Experience working in a SaaS, software-development or cloud-first organization
• Familiarity with MDM / endpoint-management tooling and software inventory reviews
• Exposure to AWS, Azure or other public-cloud security controls