Security Questionnaire & Compliance Analyst

Description

Summary: We're seeking a detail-oriented junior Information Security professional to review and complete customer security questionnaires, RFPs, and security reviews, offering hands-on experience in InfoSec or GRC. Highlights: 1. Gain hands-on experience at an AI-driven startup 2. Work closely with Security, Sales, Legal, and Engineering teams 3. Opportunity to advance into broader InfoSec, GRC, or security operations **Title:** Security Questionnaire \& Compliance Analyst (Junior) **Schedule:** Monday–Friday, 9:00 AM–5:00 PM Eastern Time **Apply here:** https://operationsarmy.com/application ### **Overview** We're looking for a detail\-oriented junior Information Security professional to help review and complete customer security questionnaires, RFPs, and security reviews. This is a great opportunity for someone early in their InfoSec or GRC career to gain hands\-on experience at an AI\-driven startup while working closely with our Security, Sales, Legal, and Engineering teams. ### **What You'll Do** * Review and complete customer security questionnaires (e.g., SIG, CAIQ, VSA, and custom formats) with high accuracy * Assist with security\-related sections of RFPs and RFIs, ensuring responses are clear, consistent, and submitted on time * Partner with Sales, Legal, Engineering, Product, and Security to gather and confirm required information * Maintain a centralized, up\-to\-date repository of security documentation, FAQs, and standard responses * Learn and document security controls, processes, and certifications (e.g., SOC 2, ISO 27001\) * Support follow\-up security reviews by tracking questions, clarifications, and approvals * Help build templates, checklists, and lightweight processes to improve future response efficiency ### **What We're Looking For** * 0–2 years of experience in Information Security, GRC, Risk, Compliance, IT Audit, or a related field (internships and project work count). * Exposure to security concepts and frameworks (e.g., SOC 2, ISO 27001, NIST, CIS) through work experience, coursework, or certifications. * Bonus: experience with third‑party security questionnaires or RFP/RFI responses, even in a supporting role. * Strong attention to detail and the ability to proofread for consistency, accuracy, and completeness. * Excellent written and verbal communication skills, with a knack for explaining technical ideas in clear, simple language. * Highly organized, comfortable tracking multiple requests at once, and reliable with deadlines. * Curiosity and a desire to learn more about information security and how SaaS/AI companies manage risk. ### **Why This Role Is Exciting** * **High visibility:** Work directly with Security, Sales, Legal, and Engineering teams * **Learning opportunity:** Hands\-on exposure to real customer security reviews and frameworks * **Impact:** Help build customer trust and accelerate deals * **Growth:** Opportunity to advance into broader InfoSec, GRC, or security operations roles **Apply here:** https://operationsarmy.com/application