Remote Information Security & Compliance Analyst (Soc2, ISO)

Information Security & Compliance Analyst (GRC)
Remote | 7-9 LPA

Description

SyncEzy is a bootstrapped, independent B2B SaaS integration company serving Construction, Trades and Service industries. We are fully remote, with a flat, easy-going team spread across 4 countries and 15 cities.

We need someone who has already done this job. Either you have run day-to-day compliance (SOC 2, ISO 27001 or similar) at another SaaS or tech company, or you are an auditor who is tired of reviewing other people's evidence and wants to own a program in-house.

You will own our routine compliance operations across SOC 2, ISO 27001 and Cyber Essentials, working with Engineering, DevOps and IT. The Senior Engineering Manager is your escalation point; the day-to-day is yours.

What you will do:

• Keep us audit-ready all year, not just in audit month
• Collect evidence, monitor controls, run access reviews and chase follow-ups to closure
• Maintain policies, the risk register, and endpoint/software compliance
• Turn framework requirements into practical asks for technical teams, without adding needless overhead
• Spot gaps early and coordinate auditors through each cycle

Requirements

Must have:

• 5+ years hands-on in GRC, security compliance or IT audit, having personally taken a company through (or audited) SOC 2 or ISO 27001
• Experience gathering and organising audit evidence with technical control owners
• Strong policy and documentation writing
• Working knowledge of cloud, IAM, endpoint security, vulnerability management, logging, backups and change management; you can read technical evidence and ask the right questions without being an engineer
• Relentless follow-up and organisation across many recurring tasks
• Clear written and spoken English

Nice to have:

• GRC platforms (Vanta, Drata, Sprinto or similar)
• Cyber Essentials familiarity
• MDM/endpoint tooling, AWS or Azure security controls
• Customer security questionnaires and vendor risk assessments
• ISO 27001 Internal Auditor/Lead Implementer, Security+, CISA, CRISC (useful, not mandatory)

Benefits

• Salary: 7-9 LPA
• Truly remote; we were remote long before COVID. Work from Home office
• Internet/phone allowance
• Company hardware after probation
• Learning and development allowance
• Generous leave, social and training policies
• Real growth path into leadership for the right person
• Zero commute, flexible and family-friendly