Maintain and mature our SOC 2 Type II and ISO 27001 certifications, driving toward automated ... analysis and remediation roadmap that keeps us futureready. * Stand up vendor & third party risk.
Quick apply
Maintain and mature our SOC 2 Type II and ISO 27001 certifications, driving toward automated ... analysis and remediation roadmap that keeps us futureready. * Stand up vendor & third party risk.
Maintain and mature our SOC 2 Type II and ISO 27001 certifications, driving toward automated ... analysis and remediation roadmap that keeps us futureready. * Stand up vendor & third party risk.
Maintain and mature our SOC 2 Type II and ISO 27001 certifications, driving toward automated ... analysis and remediation roadmap that keeps us futureready. * Stand up vendor & third party risk.
Soc Analyst Startup information
What is the difference between Soc Analyst Startup vs Soc Analyst Enterprise?
| Aspect | Soc Analyst Startup | Soc Analyst Enterprise |
|---|---|---|
| Credentials | Certifications like CompTIA Security+ or CEH, relevant experience | Similar certifications, often with additional specialized training |
| Work Environment | Fast-paced, dynamic, smaller teams, flexible tools | Structured, larger teams, established security infrastructure |
| Employer & Industry | Startups, tech companies, small to medium-sized businesses | Large corporations, financial institutions, government agencies |
| Search & Comparison Intent | Understanding roles in startups vs larger firms | Comparing responsibilities and career paths in different environments |
Soc Analyst Startup roles typically involve a more flexible, fast-paced environment with a focus on immediate threat detection and response, often requiring a broader skill set. In contrast, Soc Analyst Enterprise positions usually involve working within established security frameworks, with more specialized tasks and structured processes. Both roles require similar certifications and technical skills, but the work environment and scope differ significantly.
What are the key skills and qualifications needed to thrive as a SOC analyst at a startup?
To thrive as a SOC Analyst at a startup, you need a solid understanding of cybersecurity principles, threat detection, incident response, and typically a degree in computer science or a related field. Familiarity with SIEM tools (like Splunk or QRadar), intrusion detection systems, and certifications such as CompTIA Security+ or CEH are often required. Strong analytical thinking, adaptability, and effective communication are crucial soft skills for collaborating in a fast-paced, dynamic environment. These skills ensure proactive threat management, rapid response to incidents, and effective protection of the startup's digital assets.
What are some typical challenges a SOC analyst might face when working in a startup environment?
In a startup environment, SOC Analysts often encounter challenges such as limited resources, rapidly changing security needs, and the need to wear multiple hats. Unlike larger organizations, startups may not have well-established processes or advanced security tools in place, so analysts must be adaptable and proactive in identifying and responding to threats. Collaboration is key, as SOC Analysts frequently work closely with IT, development teams, and leadership to establish security protocols and educate staff. This dynamic environment can be both demanding and rewarding, offering opportunities for hands-on experience and rapid professional growth.
What is a SOC analyst?
SOC Analysts in a startup are cybersecurity professionals responsible for monitoring, detecting, and responding to security incidents within the organization's systems and networks. In a startup environment, they often wear multiple hats, handling threat analysis, incident response, and even policy development. Their role is crucial for protecting sensitive data and ensuring the company's digital assets are secure from cyber threats. Due to limited resources, SOC Analysts in startups may also work closely with IT and engineering teams to implement security best practices.
What are popular job titles related to Soc Analyst Startup jobs in Nevada?
For Soc Analyst Startup jobs in Nevada, the most frequently searched job titles are:
What job categories do people searching Soc Analyst Startup jobs in Nevada look for?
The top searched job categories for Soc Analyst Startup jobs in Nevada are:
What cities in Nevada are hiring for Soc Analyst Startup jobs?
Cities in Nevada with the most Soc Analyst Startup job openings:
Full-time
Medical, Dental, Vision, Life, Retirement, PTO
Posted 17 days ago
Job description
About TensorWave
Our mission is simple: deliver seamless, secure, reliable, and resilient AI compute at scale. We've built a versatile cloud platform that eliminates infrastructure barriers, empowering builders to focus on innovation instead of fighting their stack. Because breakthrough AI should move at the speed of ideas, not infrastructure.
About the Role
As our first dedicated Governance, Risk & Compliance Manager, you'll own the GRC framework end to end. This is the person who turns security from a checkbox into a competitive advantage building the continuous compliance posture that shortens enterprise sales cycles, unlocks larger contracts, and prepares us for stricter regulatory oversight and future liquidity events.
You'll operate as a senior individual contributor with broad ownership: designing controls, running audits inhouse, standing up vendor risk governance, and giving leadership real visibility into risk. You know how to build scrappy but compliant processes at a startup and how to mature them toward enterprise standards and you know the difference.
What You’ll Do
Own the GRC framework. Design, implement, and continuously test a unified controls framework, including IT General Controls (ITGCs), across a growing regulatory landscape.
Run audits inhouse. Maintain and mature our SOC 2 Type II and ISO 27001 certifications, driving toward automated, continuous evidence collection instead of manual scramble before audit cycles.
Build the SOX roadmap. Design and test internal controls over financial reporting (ICFR) and ITGCs aligned to AICPA / PCAOB standards, delivering a gap analysis and remediation roadmap that keeps us futureready.
Stand up vendor & third party risk. Replace manual, adhoc vendor reviews with an automated, enterprise grade third party risk program built for a complex SaaS ecosystem.
Operationalize a risk register. Run formal, continuous internal risk assessments, map them to a corporate risk register, and review it quarterly with leadership to prioritize security spend.
Enable the business. Build and maintain a centralized Trust Center that cuts the time sales and engineering spend answering security questionnaires.
Shift compliance left. Partner with engineering to embed compliance into the development lifecycle so new features ship without breaking existing controls.
Optimize the policy program. Maintain a policy suite that satisfies legal and security requirements while minimizing overhead on the teams that support our growth.
Who You Are
Required Qualifications
5–8+ years in Information Security, IT Audit, or GRC.
Hands-on has experience designing, implementing, and defending controls for SOC 2 Type II, ISO 27001, SOX, and/or PCI DSS.
Strong working knowledge of SarbanesOxley compliance, including evidence preparation to AICPA or PCAOB standards.
A track record spanning both fast-paced Series B/C startups and a mature enterprise or Big 4 audit environment: you've built processes from scratch and you've seen what "good" looks like at scale.
Comfortably operates as a hands-on owner, not just a program overseer.
Preferred Qualifications
Experience with APIdriven / continuous GRC tooling (e.g., Vanta, Drata, or similar).
Exposure to cloud or GPU infrastructure security.
Relevant certifications (CISA, CISSP, CRISC, ISO 27001 Lead Auditor/Implementer).
Experience embedding compliance into CI/CD pipelines.
What We Offer
Stock Options
100% paid Medical, Dental, and Vision insurance for Employees
Company Health Savings Account Contributions
100% paid Short Term and Long Term Disability Insurance for Employees
Life and Voluntary Supplemental Insurance Options
Other Insurance Options, such as Pet & Legal Insurance
Various Supplementary Health Benefits, such as discounted Virtual Healthcare Appointments and Serious Illness Support
Flexible Spending Account
401(k)
Employee Assistance Program
Flexible PTO
Paid Holidays
Parental Leave
Other In-Office Perks
Equal Employment Opportunity
TensorWave is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of any protected status under applicable law.
Reasonable Accommodations
TensorWave provides reasonable accommodations in accordance with applicable laws. If you require accommodation during the hiring process, please contact accomodations@tensorwave.com.
Employment Eligibility
All offers of employment are contingent upon verification of identity and authorization to work in United States, as required by law.
Background Checks
Where permitted by law, employment may be contingent upon the successful completion of a job-related background check.
Data Privacy Notice
By submitting an application, you acknowledge that TensorWave may collect, use, and retain your personal information for recruiting and employment-related purposes in accordance with applicable data privacy laws.