Find work in the United States.

A simpler way to find your next job.

Remote jobs in the United States

25+ jobs

Save this search

Added 4 hours ago
Detection & Investigation Analyst Lead - Retail Bank Operations
PNC
Remote, United States
…contribute to the company’s success. As a Detection & Investigation Analyst Lead within PNC's Retail Bank Operations organization, you will be based remotely in…
Added 6 hours ago
Workstream Project Manager, Clinical
FMS USA Fresenius Mgmt Services Inc
Remote, United States
Provides leadership across Clinical Workstream composed of Design Leads, IT analyst, Ops Stakeholders / owners, Vendor partners, etc., oversight and management of project delivery related…
Added 22 hours ago
AC
Technical Product Marketing Manager
AppGate Cybersecurity, Inc.
Remote, United States
- $160,000 USD / year
…requirements into clear, compelling value for mission owners, program offices and the teams that sell to…
Added 22 hours ago
BI Analyst
PrePass
Remote, United States
We’re seeking a BI Analyst to join our Business Intelligence team, reporting to the Manager of Business Intelligence. In this role, you’ll translate data into actionable insights that…
Added 22 hours ago
Senior Account Director, Enterprise Tech PR
SourceCode Communications
Remote, United States
Media & Integrated Strategy: Build sophisticated, long-term media and engagement strategies spanning media, analyst, and social landscapes. Maintain absolute editorial quality control…
Added 1 day ago
Manager, OMS Product & Delivery
ViaPath Technologies
Remote, United States
You will lead the Product Analyst function and oversee the systems, processes, and standards that enable effective backlog management, requirements quality, and cross-functional alignment.…
Added 1 day ago
CC
Biomedical Data Analyst
Computercraft Corporation
Remote, United States
- $110,000 to $135,000 USD / year
Computercraft is seeking a Biomedical Data Analyst to support the National Library of Medicine (NLM) at the National Institutes of Health in Bethesda, Maryland. NLM is the world’s largest…
Added 1 day ago
Risk Operations Analyst
SOUTHSTATE BANK, NATIONAL ASSOCIATION
Remote, United States
Develops and maintains departmental procedures and program-related reporting as assigned. Performs administration and project management duties as needed. May develop, facilitate and/or…
Added 1 day ago
BH
Senior Financial Analyst
Banner Health Corporate
Remote, United States
- $31.18 to $51.96 USD / hour
Are you a seasoned financial analyst with a passion for healthcare and a knack for turning complex data into meaningful insights? Banner Health is looking for a dynamic and experienced…
Added 2 days ago
Workday Operations Analyst
Keystone Automotive Industries
Remote, United States
The Analyst safeguards the security of the Workday HRIS platform, enabling HR and the business to operate with confidence. Partnering with HRIS colleagues and business stakeholders, this…
Added 2 days ago
IC
Director - Data & Systems (Development)
InterVarsity Christian Fellowship/USA
Remote, United States
- $79,872 to $106,500 USD / year
· Manage the Constituent Records Management team as well as the Business System analyst role
Added 2 days ago
Cybersecurity Analyst
Bertram Capital Management
Remote, United States
Bertram Labs, the technology partner to Bertram Capital, is hiring a Cybersecurity Analyst focused on governance, risk, and compliance (GRC). You will help build and run our security…
Added 2 days ago
P
Total Rewards Analyst
Propelis
Remote, United States
- $54,400 to $64,400 USD / year
The Total Rewards Analyst provides analytical and operational support for global and regional compensation, benefits, wellbeing, and recognition programs. The role translates workforce and…
Added 2 days ago
F
AI-Native Detection and Triage Engineer
Fly.io
Remote, United States
- $180,000 to $225,000 USD / year
Fly's Head of Security covers application security, trust boundaries, and the compliance program. A vulnerability researcher spends their time breaking our own hypervisor and kernel stack.…
Added 2 days ago
Industry Marketing Sr. Analyst
Unisys Corporation
Remote, United States
…improve how people live and work. As an Industry Marketing Senior Analyst, you will help shape success by turning bold ideas into measurable outcomes for our…
Added 2 days ago
BH
State Filings Analyst
Berkshire Hathaway Direct Insurance Company
Remote, United States
- $45,000 to $55,000 USD / year
The State Filings Analyst plays a critical role in ensuring compliance within the insurance regulatory system across all 50 states, where biBerk and THREE by Berkshire Hathaway provide…
Added 2 days ago
J
Field Implementation Engineer
Jobgether
Remote, United States
- $95,500 to $149,200 USD / year
Equivalent aviation data analyst experience in the U.S. military or an international air traffic control environment is acceptable.
Added 3 days ago
External Audit Consultant
Jobgether
Remote, United States
Cross-reference SOX Risk Control Matrices against information security program standards and procedures, documenting findings and recommendations.
Added 3 days ago
Senior Analyst - Security Risk Management
CVS Health
Remote, United States
The Senior Security Analyst is responsible for helping ensure CVS data remains secure and that identified risks, vulnerabilities, and defects are managed, tracked, and remediated according…
Added 3 days ago
Global Trade Analyst, Remote East Coast North America
Ciena Corporation
Remote, United States
The Global Trade Analyst supports compliance related to the import and export of goods and services across international borders, with a focus on product evaluation to determine export…
Added 3 days ago
RH
AI/Data Governance Analyst
Robert Half
Remote, United States
- $130,000 to $150,000 USD / year
Partner with audit, risk, and control teams to address identified weaknesses, strengthen oversight, and communicate program status to leadership.
Added 3 days ago
GI
Fraud Quality Assurance Analyst
Guidehouse Inc.
Remote, United States
- $98,000 to $163,000 USD / year
The analyst will evaluate investigative work products, identify trends and improvement opportunities, provide constructive feedback to investigators, and help maintain the integrity and…
Added 3 days ago
Information Security Assessment Quality Control Analyst
Saliense LLC
Remote, United States
The Information Security Assessment Quality Control Analyst supports a fast-paced, process-driven cybersecurity environment focused on delivering high-quality work products generated…
Added 3 days ago
Implementation Test Analyst
Remote, United States
The Implementation Test Analyst plans, coordinates, and executes end-to-end testing activities supporting client implementations, platform enhancements, system integrations, and enterprise…
Added 3 days ago
RI
Research Analyst
Rivel, Inc.
Remote, United States
- $60,000 to $67,000 USD / year
Rivel is currently seeking a highly detail-oriented and intellectually curious Research Analyst to join our Corporate Research team in a fully remote or hybrid capacity, if local to…

Bertram Capital Management

Cybersecurity Analyst

Remote, United States

The expected salary range for this position is: $120,000- $150,000 total annual compensation.

Apply About employer

Applications open in a new tab.

Job details

Pay: The expected salary range for this position is: $120,000- $150,000 total annual compensation.
Experience: 0–3 years of experience in information security, GRC, IT audit, risk, or IT operations.
Posting language: English
Posted: Feb 27, 2025

Original job description

Cybersecurity Analyst

Location:

Hybrid: Broomfield, Colorado or Foster City, California preferred
The team may also consider candidates to work remotely from the following states: California, Colorado, Idaho, Minnesota, Illinois, Massachusetts, Florida, New York, Wisconsin, Texas, Arizona, Indiana, or Ohio.

Firm Overview

Bertram Capital is a private equity firm targeting investments in lower middle market companies. Since its inception in 2006, the firm has raised over $4B of capital commitments. Bertram has distinguished itself in the private equity community by combining venture capital operating methodologies with private equity financial discipline to empower its portfolio companies to unlock their full business potential. This approach is unique in that Bertram is not singularly focused on achieving its investment returns through financial engineering and the extraction of near-term cash flow. Instead, Bertram focuses on reinvestment and technology enablement to drive growth and value through digital marketing, e-commerce, big data and analytics, application development and internal and external platform optimization.

Visit www.bcap.com for more information.

Position Description

Bertram Labs, the technology partner to Bertram Capital, is hiring a Cybersecurity Analyst focused on governance, risk, and compliance (GRC). You will help build and run our security program against the NIST Cybersecurity Framework (CSF) 2.0 and lead the day-to-day work of achieving and maintaining SOC 2 compliance. You will also work directly with each Bertram Capital portfolio company to make sure it meets the required framework.

This is an associate-level role for someone early in their security career who already speaks the language of frameworks. Your core strengths are organization, clear communication, and process discipline. You will turn framework requirements into policies, controls, evidence, and repeatable workflows, and you will work closely with Bertram Labs engineers, IT staff, external auditors, and business leaders.

You won't be doing this alone. You will work directly with our Cybersecurity Engineer to determine the right technical solutions and recommendations to meet the requirements of each security program. You will also work directly with our CISO, who provides oversight, to determine the correct remediation procedures and maturity level requirements for each portfolio company.

Responsibilities

Governance (NIST CSF 2.0)

Maintain our NIST CSF 2.0 Current and Target Profiles, and track gaps across all six Functions, with particular ownership of Govern (GV).
Draft, update, and manage the review cycle for information security policies, standards, and procedures.
Maintain the risk register: document risks, owners, treatment decisions, and due dates, and follow up until closed.
Map controls across frameworks (NIST CSF, SOC 2, CIS Controls, ISO/IEC 27001) so one control satisfies many requirements.
Manage the firm's third-party supplier due diligence process (Bertram vendors only): collect vendor-supplied information (security questionnaires, SOC reports, policies, certifications), analyze it against the requirements of our due diligence process, and submit an analysis summary to the CISO, who approves or rejects the vendor.

Portfolio company compliance

Own the security baseline for each portfolio company (a primary responsibility of this role). After an acquisition closes, support implementation of the CISO's initial analysis, then transition it into the company's security baseline and run the scheduled, recurring baseline reviews from there.
Work directly with each portfolio company's leadership and IT teams to assess and track compliance with the required framework.
Run framework gap assessments at each company and help build practical remediation plans.
Manually collect compliance data and evidence from each portfolio company, and track each company's status and open remediation items, and report progress to Bertram Labs leadership.
Share policy templates, control guidance, and best practices so portfolio companies don't start from scratch.
Help each portfolio company establish its own third-party vendor due diligence program, including the process, templates, and review criteria. Each company runs its own reviews.

SOC 2 compliance

Coordinate SOC 2 readiness, the Type I audit, and ongoing Type II audit periods against the AICPA Trust Services Criteria.
Own the control inventory and evidence calendar: know which control needs which evidence, from whom, and when.
Collect, organize, and quality-check audit evidence, and manage auditor requests through to closure.
Track exceptions and remediation items with control owners until they are fixed and re-tested.
Build and maintain the evidence tracker and repository by hand (spreadsheets and shared drives); we do not use an automated compliance platform.

Process and communication

Run recurring control activities: access reviews, security awareness training, policy attestations, and tabletop exercises.
Turn framework language into plain-English requirements engineers and business staff can act on.
Report compliance status, open risks, and audit progress to Bertram Labs leadership in a clear, regular cadence.
Collect the evidence the CISO needs to answer investor (LP) due diligence questionnaires (DDQs) and other security questionnaires.
Support incident response documentation and post-incident reviews as needed.
Perform other duties and projects as assigned.

Qualifications

0–3 years of experience in information security, GRC, IT audit, risk, or IT operations. Internships and relevant academic projects count.
Bachelor's degree in cybersecurity, information systems, computer science, or a related field, or equivalent practical experience.
Working knowledge of at least one major security framework (NIST CSF, NIST SP 800-53, ISO/IEC 27001, or CIS Controls) and how controls map between them.
Basic understanding of SOC 2: what the Trust Services Criteria are, and the difference between a Type I and a Type II report.
Exceptional organization: you can track dozens of open items across many owners without dropping any.
Clear written and verbal communication, including the ability to explain security requirements to non-technical leaders.
Process mindset: you document how things are done, then make them repeatable.
Comfort with core IT concepts: identity and access management, endpoints, networks, and cloud services.

Preferred Qualifications

Relevant certifications, such as ISC2 CC, CompTIA Security+, ISACA CISA, or ISC2 CGRC.
Hands-on involvement in a SOC 2, ISO/IEC 27001, or similar audit, on either the company or the auditor side.
Strong Excel or Google Sheets skills for building and maintaining compliance trackers. Exposure to compliance automation platforms (Vanta, Drata, or similar) is a plus.
Familiarity with public cloud environments (AWS, Azure, or Google Cloud) and Microsoft 365 or Google Workspace security settings.
Experience with ticketing and project tools (Jira, monday.com, or similar) to run compliance work.

Compensation and Benefits

The expected salary range for this position is: $120,000- $150,000 total annual compensation. Offered salary may be based on a variety of factors including skills, experience, and qualifications for the role. Other compensation includes profit sharing.

Comprehensive medical, dental, and vision benefits are provided at no cost to the employee. We offer a generous 401K match as well as a “take what you need” PTO policy.

If hired, employee will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Diversity, Equity, and Inclusion

At Bertram Capital we value and celebrate the many perspectives that arise from a variety of cultures, genders, religions, national origins, ages, abilities, socioeconomic status and sexual orientation. Our commitment to Diversity, Equity and Inclusion (DEI) ensures that Bertram is a place that attracts, grows, and promotes top talent from all backgrounds.

Apply About employer

More about this job

Skills

Cybersecurity
Regulatory compliance
Communication skills
Leadership
Quality assurance procedures
Incident response
Documentation
Computer science
Security regulations
Identity and access management
Security+
CISA
Microsoft Excel
Google Sheets
AWS
Microsoft Azure
Google Cloud
Microsoft 365
Google Workspace
Jira
Monday.com

Report this job