SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Rhymetec, founded in 2015 and headquartered in New York City, helps organizations achieve compliance faster by building effective and compliant information security programs. The company specializes in compliance, cybersecurity, and data privacy services.
As a Senior Cyber Security Analyst, you will serve as a key technical resource supporting Security Program Managers in delivering comprehensive compliance and security solutions to clients. This is a fully remote role (US-based, with New York preferred).
Key responsibilities include:
- Design and implement comprehensive compliance programs aligned with multiple frameworks (SOC 2, ISO 27001, HIPAA, GDPR, CCPA, etc.)
- Configure and manage compliance platforms for clients
- Act as a secondary liaison between Rhymetec, clients, and Security Program Managers during project execution
- Participate in weekly meetings with high-priority and sensitive clients
- Serve as secondary liaison between clients and auditors during compliance assessments
- Conduct training sessions on compliance requirements and security best practices
- Complete security questionnaires on behalf of clients
- Facilitate Incident Response Tabletop exercises with clients
- Facilitate Business Continuity and Disaster Recovery tabletop exercises
- Collaborate on building and managing comprehensive risk management programs
Required qualifications:
- Bachelor's degree in Technology or Cybersecurity from an accredited university, OR 5+ years of direct experience in relevant areas
- 4+ years of work experience in technology, cybersecurity, and regulatory compliance
- Customer service experience and ability to develop professional relationships
- Strong logical security skills with cloud security experience
- Understanding of cloud environments (AWS, GCP, Azure) and security controls integration through DevOps and IaaS
Preferred qualifications:
- Experience translating and implementing SOC 2, ISO 27001, HIPAA, GDPR, CCPA, and other compliance frameworks
- Certifications: Cloud+, CySA+, CISSP, CSSP, CISM, or CRISC
