ZipRecruiter

Log In

2

Remote Soc 2 Analyst Jobs in Georgia (NOW HIRING)

Merci Technologies - Talent

GRC Analyst

Atlanta, GA · Remote

... remote position open to Contract or Full-Time candidates. Key Responsibilities * Conduct control assessments and gap analyses against frameworks including NIST CSF, NIST 800-53, ISO 27001, SOC 2, and ...

Merci Technologies - Talent

GRC Manager

Atlanta, GA · Remote

... a remote contract engagement. In this role, you will serve as the primary driver of the ... Manage audit and assessment activities including SOC 2, ISO 27001, NIST CSF, CMMC, or equivalent ...

Merci Technologies - Talent

AWS Cloud Engineer

Atlanta, GA · Remote

$53.50 - $71.75/hr

Remote About the Role: Merci Technologies is seeking an AWS Cloud Engineer to design, build, and ... Experience working in compliance-driven environments (SOC 2, CMMC, HIPAA) a plus What You Will ...

Transact Campus Inc

Business Risk Analyst

Atlanta, GA · On-site +1

$70K - $98K/yr

Working knowledge of SOC 2, PCI DSS, HIPAA, GovRAMP, NIST CSF or similar frameworks. * Prior ... Strong analytical, communication, and project management skills. * Ability to communicate clearly ...

Transact Campus

Business Risk Analyst

Atlanta, GA · On-site +1

$70K - $98K/yr

Working knowledge of SOC 2, PCI DSS, HIPAA, GovRAMP, NIST CSF or similar frameworks. * Prior ... Strong analytical, communication, and project management skills. * Ability to communicate clearly ...

Worth AI

Security Engineer

Orlando, FL · On-site +1

Solid analytical and troubleshooting skills, with the ability to prioritize under competing ... Exposure to compliance frameworks such as SOC 2 * Experience with Jira, Linear, or similar ...

Newell Brands

Understanding of security frameworks such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. * Strong ... The Remote base pay range for this position is from $76,800.00 to $105,600.00. Salary will be based ...

Aprio

Senior Associate, Compliance as a Service

Atlanta, GA · On-site +1

$80K - $132K/yr

... 1, SOC 2, ISO 27001, ISO 27701, HITRUST, CMMC, FedRAMP, NIST CSF, and GDPR. * Develop draft ... remote and hybrid options What's in it for you: - Working with an industry leader : Be part of a ...

Trella Health

S. locations in a remote capacity. Reports to: Chief Technology Officer As the VP of Data Strategy ... Ensure full compliance with HIPAA, and SOC 2, and applicable state privacy laws; partner with ...

Harris

... SOC 2, state security requirements, federal client expectations). Contract & Vendor Management ... Remote work and more! About STC Health: STChealth, founded in 1988, is dedicated to eradicating ...

Harris

... SOC 2, state security requirements, federal client expectations). Contract & Vendor Management ... Remote work and more! About STC Health: STChealth, founded in 1988, is dedicated to eradicating ...

Worth AI

Senior Agentic (AI) Engineer

Atlanta, GA · On-site +1

$100K - $138K/yr

Partner with security and compliance to keep agents inside SOC 2, GDPR, CCPA, and fair-lending ... All Remote Hires will be required to travel to Orlando, Florida at least twice per year for Town ...

next page

Showing results 1-20

All JobsSoc 2 Analyst JobsRemote Soc 2 Analyst JobsRemote Soc 2 Analyst Jobs in Georgia

Remote Soc 2 Analyst information

What is a Remote SOC 2 Analyst?

A Remote SOC 2 Analyst is a cybersecurity professional who works remotely to help organizations achieve and maintain SOC 2 compliance. SOC 2 (Service Organization Control 2) is a set of standards designed to ensure service providers securely manage data to protect the privacy and interests of their clients. The analyst assesses an organization's security controls, policies, and procedures, identifies gaps, and recommends improvements. They also assist with preparing for SOC 2 audits, managing documentation, and ensuring that security practices align with SOC 2 requirements, all while working from a remote location.

What are the key skills and qualifications needed to thrive as a Remote SOC 2 Analyst?

To excel as a Remote SOC 2 Analyst, you need a solid understanding of information security, risk assessment, and compliance frameworks, typically supported by a degree in information security or related fields. Familiarity with tools like GRC platforms, audit management systems, and certifications such as CISA or CISSP are often required. Strong analytical thinking, attention to detail, and effective communication are vital soft skills for interpreting controls and collaborating with clients remotely. These skills ensure accurate assessments, maintain regulatory compliance, and enable efficient communication in a distributed work environment.

What are some common challenges faced by Remote SOC 2 Analysts when working with distributed teams?

Remote SOC 2 Analysts often face challenges related to communication and collaboration, particularly when coordinating with IT, security, and compliance teams across different locations and time zones. Ensuring consistent documentation and maintaining up-to-date evidence for audits can require proactive organization and regular virtual check-ins. Leveraging collaboration tools and establishing clear processes helps streamline workflows and ensures everyone stays aligned on compliance tasks, despite the physical distance.

What is the difference between Remote Soc 2 Analyst vs Remote Security Auditor?

AspectRemote Soc 2 AnalystRemote Security Auditor
CertificationsSOC 2, CISSP, CISACISA, CISSP, ISO 27001 Lead Auditor
Work EnvironmentRemote, client-facing, compliance-focusedRemote or onsite, audit and assessment-based
Industry UsageTech, finance, healthcareVarious industries, including finance and healthcare

Remote Soc 2 Analysts primarily focus on preparing organizations for SOC 2 compliance, ensuring controls meet standards. Remote Security Auditors conduct comprehensive evaluations of security controls across various frameworks. While both roles require similar certifications and often work remotely, Soc 2 Analysts specialize in SOC 2 reports, whereas Security Auditors have a broader scope including multiple standards.

Is a remote SOC 2 analyst still in demand?

Remote SOC 2 analysts are in strong demand due to increasing cybersecurity regulations and the need for organizations to demonstrate compliance. Skills in security frameworks, audit processes, and familiarity with tools like GRC platforms enhance job prospects in this field.

What are the most commonly searched types of Soc 2 Analyst jobs in Georgia?

The most popular types of Soc 2 Analyst jobs in Georgia are:

What are popular job titles related to Remote Soc 2 Analyst jobs in Georgia?

For Remote Soc 2 Analyst jobs in Georgia, the most frequently searched job titles are:

What job categories do people searching Remote Soc 2 Analyst jobs in Georgia look for?

The top searched job categories for Remote Soc 2 Analyst jobs in Georgia are:

What cities in Georgia are hiring for Remote Soc 2 Analyst jobs?

Cities in Georgia with the most Remote Soc 2 Analyst job openings:

Remote Soc 2 Analyst jobs near you

GRC Analyst

Merci Technologies - Talent

Atlanta, GA • Remote

Full-time

Re-posted 24 days ago

Job description

About the Role
Merci Technologies is seeking a GRC Analyst to support the governance, risk, and compliance program for one of our enterprise clients. This role sits at the intersection of security, audit, and business operations, translating complex regulatory and framework requirements into practical controls that teams can actually implement and sustain. You will be the person who knows where the control gaps are, what the auditors are going to ask for, and how to keep the organization audit-ready year round rather than scrambling at assessment time.

The work is varied and visible. In a given month you might run a control assessment against NIST CSF, prepare evidence for a SOC 2 examination, complete a vendor risk review for a new SaaS purchase, and brief stakeholders on the status of open findings. You will maintain the policy library, track risk to closure, and act as a trusted advisor to engineering and business teams who need to understand what compliance requires of them. This is a strong fit for someone who is organized, detail-driven, and comfortable holding teams accountable to commitments. This is a fully remote position open to Contract or Full-Time candidates.

Key Responsibilities

  • Conduct control assessments and gap analyses against frameworks including NIST CSF, NIST 800-53, ISO 27001, SOC 2, and CMMC
  • Plan and support internal and third-party audits, including scoping, evidence collection, and walkthroughs
  • Track audit and assessment findings to remediation and closure, escalating risks where needed
  • Develop, maintain, and version-control security policies, standards, and procedures
  • Perform vendor and third-party risk assessments and document risk acceptance decisions
  • Build and maintain the risk register and report risk posture to leadership and stakeholders
  • Support regulatory, customer, and compliance reporting requests
  • Help operationalize new framework or regulatory requirements as they emerge

Required Qualifications

  • 3 to 5 years of experience in governance, risk, and compliance, IT audit, or information security
  • Working knowledge of one or more frameworks: NIST CSF, NIST 800-53, ISO 27001, SOC 2, or CMMC
  • Demonstrated experience supporting audit cycles and risk assessments end to end
  • Ability to read a control requirement and translate it into clear, actionable guidance
  • Strong documentation, organization, and stakeholder communication skills

Preferred Qualifications

  • CISA, CRISC, ISO 27001 Lead Auditor, or CISSP certification
  • Hands-on experience with GRC platforms such as Archer, ServiceNow GRC, or OneTrust
  • Familiarity with defense, healthcare, or financial-services compliance requirements
  • Experience with CMMC readiness and assessment preparation

What You Will Bring
You are the kind of person who reads the fine print and keeps the spreadsheet honest. You can push a remediation owner for an update without burning the relationship, and you can explain to a busy engineer why a control matters in language they care about. You treat compliance as a way to make the organization genuinely more secure, not just to pass an audit.