Note: The job is a remote job and is open to candidates in USA. HeroDevs is seeking an Associate-Level Security & Compliance Analyst to join their Support and Compliance team. In this role, you will help operate and strengthen the security & compliance program, supporting SOC 2 compliance and ensuring customer workflows are reliable and secure.
Responsibilities
- Handle inbound support and help-desk questions; answer routine questions confidently and escalate complex ones to senior teammates
- Gather and organize evidence for the annual SOC 2 audit; maintain the evidence repository and control-owner tracker to keep the audit process running smoothly
- Complete first-draft responses to inbound security questionnaires using our answer library; identify and flag gaps for review by a senior teammate
- Triage and route Data Processing Agreement (DPA) requests; maintain the DPA and subprocessor log with accuracy and care
- Monitor CrowdStrike and endpoint security dashboards for coverage gaps and open alerts; investigate and report anomalies
- Keep HeroDevs' trust-center content, policy library, and control documentation accurate and up to date
- Learn continuously, build fluency in compliance frameworks, security tooling, and the compliance program as a whole
Skills
- Foundational understanding of SOC 2 Trust Services Criteria and familiarity with common frameworks such as ISO 27001 and NIST
- Strong organizational skills, meticulous attention to detail, and clear written communication
- Comfort working in GRC tooling and endpoint/security dashboards (e.g., CrowdStrike or similar)
- Ability to execute well-defined tasks reliably and to recognize when something is ambiguous—asking for help early rather than guessing
- Effective written and verbal communication skills, especially when responding to customer-facing questions
- Ability to work independently and collaboratively in a distributed team environment
- Genuine interest in security, compliance, and building customer trust
Company Overview