Cybersecurity Analyst - Commercial Compliance

Detailed understanding of core security concepts, including data encryption, logical access controls, and boundary security mechanisms.

Working experience with Linux operating systems.

Experience supporting security or compliance efforts in AWS and GCP cloud environments.

Experience working with a global team where the majority of team members are remote.

Experience managing content throughout its lifecycle in the Microsoft Office 365 and Google Workspace ecosystems.

Experience using GRC automation and evidence management platforms such as Anecdotes, Drata, or similar tools to streamline compliance processes and maintain continuous monitoring.

The salary range listed does not include other forms of compensation or benefits (e.g. i.e. bonuses, commissions, stocks, health insurance benefits, etc.) offered to candidates. Visit our careers site for more

information

The choices you make in your career journey matter. You want to do interesting work in an important field while also having time to live your life, which is why we place so much value in your life-work balance. Armis sets you up for success with comprehensive health benefits, discretionary time off, paid holidays including monthly

me

days, and a highly inclusive and diverse workplace. Put your unique experiences and perspective to work in an environment where they will enable you to thrive, grow, and live your life with integrity.

Audit and Assessment Support:

Provide direct support for external and internal audit efforts, specifically focusing on frameworks such as SOC 2 Type 2, ISO 27001, ISO 27017, ISO 27018,  and ISO 42001.

Evidence Management & Monitoring:

Execute and document procedures for continuous monitoring and evidence gathering.

You will also implement automated solutions, including utilizing AI, to effectively reduce manual efforts associated with repetitive evidence collection tasks, ensuring security artifacts are accurately captured and readily available.

Review, edit and update internal security policies, standards and procedures to ensure they accurately reflect current operational controls and compliance requirements.