> Markdown version of [/jobs/ext/1251168-information-security-analyst-compliance-lead-contract](https://www.wearedevelopers.com/jobs/ext/1251168-information-security-analyst-compliance-lead-contract). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst/Compliance Lead - CONTRACT

- **Company:** NexusTek Inc
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Microsoft Azure, Cyber Security, PCI Data Security Standards, Software Vulnerability Management, Infrastructure Automation Frameworks
- **Published:** July 12, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=a0e2b73db4ec52ef

## About the Role

* Hands-on experience with SOC 2 compliance - familiarity with Trust Service Criteria, evidence collection, and control mapping
 * Proficiency with Vanta or a comparable GRC / compliance automation platform
 * Working knowledge of CrowdStrike or comparable EDR platforms for alert triage and basic incident response
 * Understanding of HIPAA compliance requirements and high-trust environments
 * Ability to translate technical security controls into audit-ready documentation
 * Strong organizational skills - able to independently manage a large volume of evidence across multiple control areas, * Prior experience in a healthcare or health services organization
 * Familiarity with third-party audit firms and evidence submission processes
 * Exposure to additional frameworks such as ISO 27001, NIST RMF, GDPR, or PCI DSS
 * Experience with Azure environments or cloud-hosted infrastructure
 * Background in GRC (Governance, Risk, and Compliance) in addition to hands-on security operations

## Description

We are placing one Security Analyst / Compliance Lead as a dedicated, embedded resource. This person will function as an extension of the internal team - owning day-to-day security operations and SOC 2 evidence collection. This is a hybrid role, not a senior architect or vCISO seat, and it does not involve facing the auditor directly., * Upload and manage security policies within a leading compliance automation platform

 * Gather, organize, and upload evidence for SOC 2 controls across the defined audit scope
 * Map evidence to applicable Trust Service Criteria; identify and flag gaps
 * Support remediation efforts and compensating controls as audit findings surface
 * Monitor and triage EDR alerts; perform initial investigations on security incidents
 * Execute incident response procedures in accordance with the client's IR plan
 * Handle ad hoc security and compliance tasks as directed by client leadership
 * Support the team in establishing repeatable security processes as the program matures, * Not a senior security architect or vCISO seat - this is a mid-level, hybrid role
 * Not the primary interface with the auditor - client leadership owns that relationship
 * Not initially scoped for vulnerability management or third-party risk - those may be added as the engagement grows

This is a confidential opportunity. Identifying details have been withheld intentionally.


## Related Videos

- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)