Security & Compliance Analyst

About the Role

We are seeking an Associate-Level Security & Compliance Analyst to join our Support and Compliance team. In this role, you will help operate and strengthen HeroDevs' security & compliance program, supporting SOC 2 compliance, security questionnaires, and customer workflows, ensuring our enterprise customers can rely on the security and integrity of everything we ship. You will also help support the normal triaging and escalation of customer questions for our Never-Ending Support solutions. This is an ideal opportunity for someone early in their security or GRC career who wants to learn a modern compliance program from the inside, with close guidance and mentorship from senior teammates.

Key Responsibilities

• Handle inbound support and help-desk questions; answer routine questions confidently and escalate complex ones to senior teammates.
• Gather and organize evidence for the annual SOC 2 audit; maintain the evidence repository and control-owner tracker to keep the audit process running smoothly.
• Complete first-draft responses to inbound security questionnaires using our answer library; identify and flag gaps for review by a senior teammate.
• Triage and route Data Processing Agreement (DPA) requests; maintain the DPA and subprocessor log with accuracy and care.
• Monitor CrowdStrike and endpoint security dashboards for coverage gaps and open alerts; investigate and report anomalies.
• Keep HeroDevs' trust-center content, policy library, and control documentation accurate and up to date.
• Learn continuously, build fluency in compliance frameworks, security tooling, and the compliance program as a whole.

Required Qualifications

• Foundational understanding of SOC 2 Trust Services Criteria and familiarity with common frameworks such as ISO 27001 and NIST.
• Strong organizational skills, meticulous attention to detail, and clear written communication.
• Comfort working in GRC tooling and endpoint/security dashboards (e.g., CrowdStrike or similar).
• Ability to execute well-defined tasks reliably and to recognize when something is ambiguous—asking for help early rather than guessing.
• Effective written and verbal communication skills, especially when responding to customer-facing questions.
• Ability to work independently and collaboratively in a distributed team environment.
• Genuine interest in security, compliance, and building customer trust.

What Sets This Level Apart

This is a learning-focused role. You'll work within a defined scope under close guidance, executing well-established processes and evidence-gathering tasks while developing the judgment to handle greater ambiguity over time. Success at this level looks like reliable execution, early escalation of anything unclear, and steady growth toward owning workflows end to end.

 

At HeroDevs, we believe in the power of diversity, equity, and inclusion to drive innovation, creativity, and success. We are committed to creating a workplace that embraces and celebrates individual differences. We encourage people of all backgrounds and experiences to apply.