ZipRecruiter

Log In

1

Soc Two Analyst Jobs in Utah (NOW HIRING)

Lucid Software

Security Analyst

Salt Lake City, UT · On-site +1

As a Security Analyst at Lucid Software, you will protect our corporate assets, world-class web ... Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits. * Proactively ...

Lucid Software

Security Analyst

Salt Lake City, UT · On-site

As a Security Analyst at Lucid Software, you will protect our corporate assets, world-class web ... Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits. * Proactively ...

Lucid Software

Security Analyst

Salt Lake City, UT · On-site +1

As a security analyst at Lucid you will be helping to protect corporate assets, including our world ... NIST 800-53, ISO 27001, SOC 2, etc) * Security-related Certification(s): E.g., SSCP, CC, Security ...

CYNET SYSTEMS

Planner/Buyer Analyst

Draper, UT · On-site

$32 - $37/hr

Ability to analyze financial reports, price proposals and other technical data. * Ability to ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...

Enzo Health

Security Architect

Lehi, UT · On-site

$61 - $78.75/hr

... analysis into our CI/CD • Threat-model our own systems, including AI-specific attack surfaces (prompt injection, model supply chain, agent abuse) • Lead HIPAA, SOC 2, and emerging compliance ...

Persistent Systems

Cyber Defense Analyst

Clearfield, UT · On-site

$101K - $121K/yr

Four or more years of hands-on experience in security operations, SOC analysis, incident response, or cybersecurity monitoring, or two years of experience and a degree in a related field

LVT

Senior Security Engineer

American Fork, UT · On-site

Incident command, risk prioritization frameworks (such as EPSS or attack-path analysis), policy-as-code, compliance automation (FedRAMP, SOC 2, or ISO 27001), or enterprise AI security controls.

Enzo Health

Security Architect

Lehi, UT · On-site

$61 - $78.75/hr

... analysis into our CI/CD * Threat-model our own systems, including AI-specific attack surfaces (prompt injection, model supply chain, agent abuse) * Lead HIPAA, SOC 2, and emerging compliance programs ...

CYNET SYSTEMS

Senior Software Engineer

Salt Lake City, UT · On-site

$67.19 - $72.19/hr

Lead end-to-end software development across requirements analysis, architecture, implementation ... Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards ...

next page

Showing results 1-20

All JobsSoc Two Analyst JobsSoc Two Analyst Jobs in Utah

Soc Two Analyst information

What is the difference between Soc Two Analyst vs Security Analyst?

AspectSoc Two AnalystSecurity Analyst
CertificationsISO 27001, SOC 2, CompTIA Security+CompTIA Security+, CISSP, CEH
Work EnvironmentAuditing, compliance, risk assessment in IT environmentsMonitoring, threat detection, incident response
Industry UsageIT service providers, SaaS companies, cloud providersAny organization with cybersecurity needs

While both roles focus on cybersecurity, a Soc Two Analyst primarily conducts audits and ensures compliance with SOC 2 standards, whereas a Security Analyst actively monitors and defends against security threats. The Soc Two Analyst emphasizes compliance and risk assessment, while the Security Analyst focuses on threat detection and incident response.

Is Soc Two analyst still in demand?

Soc Two analysts are in demand due to the increasing need for cybersecurity monitoring and incident response in organizations. They typically require knowledge of security tools, threat detection, and compliance standards, making the role relevant in many industries seeking skilled cybersecurity professionals.

What does a Soc Two analyst do?

A Soc Two analyst monitors and analyzes security systems to detect and respond to cybersecurity threats, ensuring compliance with Soc Two standards. They use security tools, perform incident investigations, and document security processes to maintain data protection and system integrity.

What are the most commonly searched types of Soc Two Analyst jobs in Utah?

The most popular types of Soc Two Analyst jobs in Utah are:

What cities in Utah are hiring for Soc Two Analyst jobs?

Cities in Utah with the most Soc Two Analyst job openings:

Soc Two Analyst jobs near you

Security Analyst

Salt Lake City, UT • On-site, Remote

Lucid Software
1 - 5K employees
Learn more about Lucid Softwareexternal

Full-time

Re-posted 10 days ago

Job description

Lucid Software is the leader in visual collaboration and work acceleration, helping teams see and build the future by turning ideas into reality. Our products, business, and workplace culture have received numerous awards, such as being named to the Forbes Cloud 100 and a Fortune Best Workplace in Technology. Lucid is a hybrid workplace, allowing employees to work remotely, from one of our offices, or a combination of the two depending on the needs of the role and team. At Lucid, we hold true to our core values of teamwork over ego, innovation in everything we do, individual empowerment, initiative, and ownership, and passion and excellence in every area. We value diverse perspectives and are dedicated to creating an environment that is respectful and inclusive for everyone.

As a Security Analyst at Lucid Software, you will protect our corporate assets, world-class web applications, and employees. You will focus on the execution of day-to-day GRC (Governance, Risk, and Compliance) operations, third-party risk assessments, and championing customer trust. Lucid Software's security team fosters an environment where business and development can quickly adapt and innovate. We stay abreast of evolving security, legal, and business requirements through a risk and compliance mindset. Our mission is to protect and support the objectives of the business.

Responsibilities:

  • Conduct third-party vendor risk assessments and internal risk evaluations; identify, document, and report on potential vulnerabilities and control gaps.
  • Respond directly to standard vendor security questionnaires and support internal teams (i.e. Sales, Customer Success, etc.) in answering security-related questions from prospects.
  • Track and collect evidence for ongoing SOC 2 and ISO 27001 compliance audits.
  • Proactively identify emerging threats and associated risks to existing business processes and corporate assets, and collaborate with senior team members to develop practical security solutions.
  • Coordinate and deliver security awareness training programs to employees to foster a strong security culture. 
  • Assure compliance to outside regulations affecting the Company
  • Collect and maintain impactful security and compliance metrics for team dashboards.
  • Partner with Legal, Engineering, IT, Finance, and HR to ensure corporate security policies are understood and followed.
  • Identify operational inefficiencies and areas for improvement in our existing security controls, and help design smoother workflows.

Requirements:

  • Bachelor's degree in information security assurance, business management, or a related field
  • 3+ years of experience with third party risk management, GRC, customer due diligence, etc.
  • Understanding of common security frameworks and principles (e.g. NIST 800-53, ISO 27001, SOC 2, etc). Strong organizational skills with the ability to manage tasks independently and meet deadlines with minimal oversight on daily routines.
  • Excellent verbal and written skills; comfortable translating security concepts into clear documentation.
  • Strong interpersonal skills with a track record of building positive relationships across non-technical teams (like Legal, HR, Finance) and technical teams (like IT and Engineering) to resolve security risks collaboratively.

Preferred Qualifications:

  • Prior experience working within a modern SaaS environment or cloud-first technology company, with a basic familiarity of how cloud applications operate.
  • Prior knowledge of and skill in applying risk management principles and practices
  • One or more preferred Certification(s): CRISC, CISSP, CISA, SSCP, CC, Security+, CySA+, etc.
  • Strong understanding of cloud environments (AWS, GCP, or Azure).
  • Experience with process improvement, efficiency enhancements, and automation of GRC and Security Assurance functions. Ability to use AI tools to enhance and enable work flows and automation.

#LI_DA1

Apply