Cybersecurity Compliance Analyst — Hybrid, San Francisco Bay Area

Job overview

The Cybersecurity Compliance Analyst — Hybrid, San Francisco Bay Area role is hybrid, with two days in the office and three days remote per week. Compensation is not specified. The analyst supports Xantrion’s Compliance Service offering and internal compliance programs, working with the Client Strategy team. The role assesses client security controls, documents findings and risks, reviews vendor cybersecurity evidence, and supports internal audits. Its work helps produce accurate client deliverables and organized evidence for compliance assessments, remediation planning, and audit activities.

What you'll do

• Support cybersecurity assessments using NIST CSF, CIS Controls, and company standards
• review configurations and evidence and document gaps
• draft and maintain security plans and policies
• support risk assessments and remediation roadmaps
• review vendor cybersecurity evidence
• maintain inventories and testing schedules
• coordinate evidence for SOC 2 Type II and ISO/IEC 27001 activities
• improve reusable templates and procedures.

What we're looking for

Skills & competencies

cybersecurity compliance analyst

hybrid

san francisco bay area

2 days office

3 days remote

nist csf

cis controls

soc 2

iso/iec 27001

xantrion

client assessments

no degree required

Work arrangement

• Weekend coverage required

Benefits & perks

• Medical, dental, and vision coverage for employee and family
• 401(k) match up to 4%
• certification reimbursement and annual training budget
• 17 days of PTO plus paid training days
• referral bonuses.

Why this role

The posting states no travel is required. A relevant degree or certification is welcome but not required; equivalent practical experience will be considered.

About the employer

Xantrion is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.